# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Mar 3 2020 14:14:30 # Log Creation Date: 22.03.2020 00:54:19.148 Process: id = "1" image_name = "splwow32.exe" filename = "c:\\users\\fd1hvy\\desktop\\splwow32.exe" page_root = "0x9ea1000" os_pid = "0x1134" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\splwow32.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x1160 [0074.762] GetStartupInfoW (in: lpStartupInfo=0x79f98c | out: lpStartupInfo=0x79f98c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\splwow32.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0074.762] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0074.762] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2830000 [0074.777] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0074.777] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0 [0074.777] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20 [0074.778] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40 [0074.778] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00 [0074.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x214) returned 0x28305a8 [0074.779] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0074.779] GetCurrentThreadId () returned 0x1160 [0074.779] GetStartupInfoW (in: lpStartupInfo=0x79f928 | out: lpStartupInfo=0x79f928*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\splwow32.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0074.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x800) returned 0x28307c8 [0074.779] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0074.779] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0074.779] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0074.779] SetHandleCount (uNumber=0x20) returned 0x20 [0074.779] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\splwow32.exe\" " [0074.779] GetEnvironmentStringsW () returned 0xcfdfb8* [0074.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0074.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x565) returned 0x2830fd0 [0074.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2830fd0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0074.780] FreeEnvironmentStringsW (penv=0xcfdfb8) returned 1 [0074.780] GetLastError () returned 0xcb [0074.780] SetLastError (dwErrCode=0xcb) [0074.780] GetLastError () returned 0xcb [0074.780] SetLastError (dwErrCode=0xcb) [0074.780] GetLastError () returned 0xcb [0074.780] SetLastError (dwErrCode=0xcb) [0074.780] GetACP () returned 0x4e4 [0074.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x220) returned 0x2831540 [0074.780] GetLastError () returned 0xcb [0074.781] SetLastError (dwErrCode=0xcb) [0074.781] IsValidCodePage (CodePage=0x4e4) returned 1 [0074.781] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x79f8f0 | out: lpCPInfo=0x79f8f0) returned 1 [0074.781] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x79f3bc | out: lpCPInfo=0x79f3bc) returned 1 [0074.781] GetLastError () returned 0xcb [0074.781] SetLastError (dwErrCode=0xcb) [0074.781] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x79f7d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0074.781] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x79f7d0, cbMultiByte=256, lpWideCharStr=0x79f138, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ洴쑗\x93Ā") returned 256 [0074.781] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ洴쑗\x93Ā", cchSrc=256, lpCharType=0x79f3d0 | out: lpCharType=0x79f3d0) returned 1 [0074.781] GetLastError () returned 0xcb [0074.781] SetLastError (dwErrCode=0xcb) [0074.781] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x79f7d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0074.781] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x79f7d0, cbMultiByte=256, lpWideCharStr=0x79f108, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉛\x93Ā") returned 256 [0074.781] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉛\x93Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0074.781] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉛\x93Ā", cchSrc=256, lpDestStr=0x79eef8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0074.781] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x79f6d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x93\x18Xì\x08ùy", lpUsedDefaultChar=0x0) returned 256 [0074.781] GetLastError () returned 0xcb [0074.781] SetLastError (dwErrCode=0xcb) [0074.781] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x79f7d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0074.781] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x79f7d0, cbMultiByte=256, lpWideCharStr=0x79f128, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉛\x93Ā") returned 256 [0074.781] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉛\x93Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0074.781] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쉛\x93Ā", cchSrc=256, lpDestStr=0x79ef18, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0074.781] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x79f5d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x93\x18Xì\x08ùy", lpUsedDefaultChar=0x0) returned 256 [0074.782] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x94cc60, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\splwow32.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\splwow32.exe")) returned 0x24 [0074.782] GetLastError () returned 0x0 [0074.782] SetLastError (dwErrCode=0x0) [0074.782] GetLastError () returned 0x0 [0074.785] SetLastError (dwErrCode=0x0) [0074.785] GetLastError () returned 0x0 [0074.785] SetLastError (dwErrCode=0x0) [0074.785] GetLastError () returned 0x0 [0074.785] SetLastError (dwErrCode=0x0) [0074.785] GetLastError () returned 0x0 [0074.785] SetLastError (dwErrCode=0x0) [0074.785] GetLastError () returned 0x0 [0074.785] SetLastError (dwErrCode=0x0) [0074.785] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.786] GetLastError () returned 0x0 [0074.786] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.787] SetLastError (dwErrCode=0x0) [0074.787] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2d) returned 0x2831768 [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.788] SetLastError (dwErrCode=0x0) [0074.788] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.789] SetLastError (dwErrCode=0x0) [0074.789] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.790] SetLastError (dwErrCode=0x0) [0074.790] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.791] SetLastError (dwErrCode=0x0) [0074.791] GetLastError () returned 0x0 [0074.792] SetLastError (dwErrCode=0x0) [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x94) returned 0x28317a0 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x1f) returned 0x2831840 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x28) returned 0x2831868 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x37) returned 0x2831898 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x3c) returned 0x28318d8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x31) returned 0x2831920 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x14) returned 0x2831960 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x24) returned 0x2831980 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0xd) returned 0x28319b0 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x17) returned 0x28319c8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x2b) returned 0x28319e8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x15) returned 0x2831a20 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x17) returned 0x2831a40 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x22) returned 0x2831a60 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0xe) returned 0x2831a90 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0xc1) returned 0x2831aa8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x3e) returned 0x2831b78 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x1b) returned 0x2831bc0 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x1d) returned 0x2831be8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x48) returned 0x2831c10 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x12) returned 0x2831c60 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x18) returned 0x2831c80 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x1b) returned 0x2831ca0 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x24) returned 0x2831cc8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x29) returned 0x2831cf8 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x1e) returned 0x2831d30 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x6b) returned 0x2831d58 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x17) returned 0x2831dd0 [0074.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0xf) returned 0x2831df0 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x16) returned 0x2831e08 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x28) returned 0x2831e28 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x27) returned 0x2831e58 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x12) returned 0x2831e88 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x21) returned 0x2831ea8 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x10) returned 0x2831ed8 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x1c) returned 0x2831ef0 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x12) returned 0x2831f18 [0074.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2830fd0 | out: hHeap=0x2830000) returned 1 [0074.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x80) returned 0x2831f38 [0074.793] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0074.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x8, Size=0x800) returned 0x2831fc0 [0074.794] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x93b823) returned 0x0 [0074.794] RtlSizeHeap (HeapHandle=0x2830000, Flags=0x0, MemoryPointer=0x2831f38) returned 0x80 [0074.795] LoadLibraryW (lpLibFileName="ADVAPI32.DLL") returned 0x756e0000 [0074.795] GetProcAddress (hModule=0x756e0000, lpProcName="SystemFunction036") returned 0x744329e0 [0074.795] SystemFunction036 (in: RandomBuffer=0x79f91c, RandomBufferLength=0x4 | out: RandomBuffer=0x79f91c) returned 1 [0074.795] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2830fd0 [0074.795] RtlSizeHeap (HeapHandle=0x2830000, Flags=0x0, MemoryPointer=0x2831f38) returned 0x80 [0074.795] SystemFunction036 (in: RandomBuffer=0x79f91c, RandomBufferLength=0x4 | out: RandomBuffer=0x79f91c) returned 1 [0074.796] RtlSizeHeap (HeapHandle=0x2830000, Flags=0x0, MemoryPointer=0x2831f38) returned 0x80 [0074.796] RtlSizeHeap (HeapHandle=0x2830000, Flags=0x0, MemoryPointer=0x2831f38) returned 0x80 [0074.796] GetLastError () returned 0x0 [0074.796] SetLastError (dwErrCode=0x0) [0074.796] GetLastError () returned 0x0 [0074.796] SetLastError (dwErrCode=0x0) [0074.796] GetLastError () returned 0x0 [0074.796] SetLastError (dwErrCode=0x0) [0074.796] GetLastError () returned 0x0 [0074.796] SetLastError (dwErrCode=0x0) [0074.796] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.797] SetLastError (dwErrCode=0x0) [0074.797] GetLastError () returned 0x0 [0074.891] SetLastError (dwErrCode=0x0) [0074.904] GetLastError () returned 0x0 [0074.904] SetLastError (dwErrCode=0x0) [0074.904] GetLastError () returned 0x0 [0074.905] SetLastError (dwErrCode=0x0) [0074.911] GetLastError () returned 0x0 [0074.911] SetLastError (dwErrCode=0x0) [0074.911] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.942] GetLastError () returned 0x0 [0074.942] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.943] GetLastError () returned 0x0 [0074.943] SetLastError (dwErrCode=0x0) [0074.944] GetLastError () returned 0x0 [0074.944] SetLastError (dwErrCode=0x0) [0074.944] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="AEEAEE SET") returned 0x1cc [0074.944] GetLastError () returned 0x0 [0074.944] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0074.944] GetStockObject (i=0) returned 0x900010 [0074.944] RegisterClassW (lpWndClass=0x79f914) returned 0xc151 [0074.945] GetSystemMetrics (nIndex=1) returned 900 [0076.570] GetSystemMetrics (nIndex=0) returned 1440 [0076.570] CreateWindowExW (dwExStyle=0x0, lpClassName="window", lpWindowName="window", dwStyle=0xcf0000, X=560, Y=402, nWidth=320, nHeight=96, hWndParent=0x0, hMenu=0x0, hInstance=0x930000, lpParam=0x0) returned 0x0 [0078.621] SetWindowLongW (hWnd=0x0, nIndex=-16, dwNewLong=0) returned 0 [0078.621] ShowWindow (hWnd=0x0, nCmdShow=0) returned 0 [0078.622] GetComputerNameA (in: lpBuffer=0x94d390, nSize=0x79f910 | out: lpBuffer="NQDPDE", nSize=0x79f910) returned 1 [0078.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5f5e100) returned 0x294f020 [0079.023] CreateFileW (lpFileName="Czuw.pIs" (normalized: "c:\\users\\fd1hvy\\desktop\\czuw.pis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0079.031] ReadFile (in: hFile=0x1dc, lpBuffer=0x79f4e0, nNumberOfBytesToRead=0x250, lpNumberOfBytesRead=0x79f4dc, lpOverlapped=0x0 | out: lpBuffer=0x79f4e0*, lpNumberOfBytesRead=0x79f4dc*=0x0, lpOverlapped=0x0) returned 1 [0079.098] SHEmptyRecycleBinW (hwnd=0x0, pszRootPath=0x0, dwFlags=0x7) returned 0x8000ffff [0083.548] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Active Directory Toplogy\"", uCmdShow=0x0) returned 0x21 [0083.738] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Anti-spam Update\"", uCmdShow=0x0) returned 0x21 [0083.750] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Compliance Audit\"", uCmdShow=0x0) returned 0x21 [0083.869] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Compliance Service\"", uCmdShow=0x0) returned 0x21 [0083.899] WinExec (lpCmdLine="sc stop \"Microsoft Exchange DAG Management\"", uCmdShow=0x0) returned 0x21 [0084.069] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Diagnostics\"", uCmdShow=0x0) returned 0x21 [0084.084] WinExec (lpCmdLine="sc stop \"Microsoft Exchange EdgeSync\"", uCmdShow=0x0) returned 0x21 [0084.099] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Frontend Transport\"", uCmdShow=0x0) returned 0x21 [0084.114] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Health Manager\"", uCmdShow=0x0) returned 0x21 [0084.131] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Health Manager Recovery\"", uCmdShow=0x0) returned 0x21 [0084.147] WinExec (lpCmdLine="sc stop \"Microsoft Exchange IMAP4\"", uCmdShow=0x0) returned 0x21 [0084.587] WinExec (lpCmdLine="sc stop \"Microsoft Exchange IMAP4 Backend\"", uCmdShow=0x0) returned 0x21 [0084.602] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Information Store\"", uCmdShow=0x0) returned 0x21 [0088.866] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Mailbox Assistants\"", uCmdShow=0x0) returned 0x21 [0089.561] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Mailbox Replication\"", uCmdShow=0x0) returned 0x21 [0090.474] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Mailbox Transport Delivery\"", uCmdShow=0x0) returned 0x21 [0090.489] WinExec (lpCmdLine="sc stop \"Microsoft Exchange POP3\"", uCmdShow=0x0) returned 0x21 [0090.502] WinExec (lpCmdLine="sc stop \"Microsoft Exchange POP3 Backend\"", uCmdShow=0x0) returned 0x21 [0090.514] WinExec (lpCmdLine="sc stop \"SQL Server Agent (TESTINSTANCE)\"", uCmdShow=0x0) returned 0x21 [0090.526] WinExec (lpCmdLine="sc stop \"SQL Server (TESTINSTANCE)\"", uCmdShow=0x0) returned 0x21 [0090.538] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x79f230, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 1 [0090.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HowToDecrypt.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\howtodecrypt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x1f0) returned 0x2831028 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x20) returned 0x2831220 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0x2831248 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831220 | out: hHeap=0x2830000) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x47) returned 0x2831280 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831248 | out: hHeap=0x2830000) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0x28312d0 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831280 | out: hHeap=0x2830000) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0x2831220 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312d0 | out: hHeap=0x2830000) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xec) returned 0x28312d0 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831220 | out: hHeap=0x2830000) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x161) returned 0x28313c8 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312d0 | out: hHeap=0x2830000) returned 1 [0090.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x211) returned 0x28327c8 [0090.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c8 | out: hHeap=0x2830000) returned 1 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831028 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x1f0) returned 0x2831028 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x20) returned 0x2831220 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0x2831248 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831220 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x47) returned 0x2831280 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831248 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0x28312d0 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831280 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0x2831220 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312d0 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xec) returned 0x28312d0 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831220 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x161) returned 0x28313c8 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312d0 | out: hHeap=0x2830000) returned 1 [0090.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x211) returned 0x28329e8 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c8 | out: hHeap=0x2830000) returned 1 [0090.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831028 | out: hHeap=0x2830000) returned 1 [0090.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x28329e8*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x79f1b8, lpOverlapped=0x0 | out: lpBuffer=0x28329e8*, lpNumberOfBytesWritten=0x79f1b8*=0x170, lpOverlapped=0x0) returned 1 [0090.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329e8 | out: hHeap=0x2830000) returned 1 [0090.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0090.633] CloseHandle (hObject=0x1f0) returned 1 [0090.635] GetLogicalDrives () returned 0x4 [0090.635] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0090.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831028 [0090.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831038 [0090.635] CreateFileW (lpFileName="C:\\HowToDecrypt.txt" (normalized: "c:\\howtodecrypt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0092.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x1f0) returned 0x2831048 [0092.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x20) returned 0x2831240 [0092.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0x2831268 [0092.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831240 | out: hHeap=0x2830000) returned 1 [0092.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x47) returned 0x28312a0 [0092.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831268 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0x28312f0 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312a0 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0x2831240 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312f0 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xec) returned 0x28312f0 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831240 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x161) returned 0x28327c8 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312f0 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x211) returned 0x2831240 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831048 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x1f0) returned 0x2831048 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x20) returned 0x2831460 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0x2831488 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831460 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x47) returned 0x28314c0 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831488 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0x28327c8 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314c0 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0x2831460 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xec) returned 0x28327c8 [0092.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831460 | out: hHeap=0x2830000) returned 1 [0092.240] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x161) returned 0x28328c0 [0092.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.240] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x211) returned 0x2832a30 [0092.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28328c0 | out: hHeap=0x2830000) returned 1 [0092.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831048 | out: hHeap=0x2830000) returned 1 [0092.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x2832a30*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x79f1b8, lpOverlapped=0x0 | out: lpBuffer=0x2832a30*, lpNumberOfBytesWritten=0x79f1b8*=0x170, lpOverlapped=0x0) returned 1 [0092.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832a30 | out: hHeap=0x2830000) returned 1 [0092.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831240 | out: hHeap=0x2830000) returned 1 [0092.243] CloseHandle (hObject=0x1f0) returned 1 [0092.246] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xd24158 [0092.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831048 [0092.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x1e) returned 0x2831058 [0092.246] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0092.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831080 [0092.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0x2831090 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0092.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28310c8 [0092.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe) returned 0x28310d8 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ff7cf4, ftCreationTime.dwHighDateTime=0x1d5ffe4, ftLastAccessTime.dwLowDateTime=0xa0ff7cf4, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa101c77f, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HowToDecrypt.txt", cAlternateFileName="HOWTOD~1.TXT")) returned 1 [0092.247] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0092.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28310f0 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x10) returned 0x2831100 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xaced8ceb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831118 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x18) returned 0x2831128 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf5233389, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf5233389, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831148 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x22) returned 0x2831158 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831188 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2e) returned 0x2831198 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28311d0 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x1e) returned 0x28311e0 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xacefef79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831208 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x12) returned 0x2831218 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0092.248] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0092.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831238 [0092.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x28) returned 0x2831248 [0092.249] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0092.249] FindClose (in: hFindFile=0xd24158 | out: hFindFile=0xd24158) returned 1 [0092.249] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0092.260] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.260] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0092.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831278 [0092.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2831288 [0092.260] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3659ec, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3659ec, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x704c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="appraiserxp.dll", cAlternateFileName="APPRAI~1.DLL")) returned 1 [0092.260] CreateFileW (lpFileName="C:\\Windows10Upgrade\\appraiserxp.dll" (normalized: "c:\\windows10upgrade\\appraiserxp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0092.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0092.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28312c8 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2831440 [0092.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2831440 [0092.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0092.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0092.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.308] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0092.308] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2831440 [0092.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0092.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0092.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0092.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0092.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0092.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0092.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312c8 | out: hHeap=0x2830000) returned 1 [0092.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0092.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0092.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0092.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4c8, lpOverlapped=0x0) returned 1 [0092.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0092.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4d0, lpOverlapped=0x0) returned 1 [0092.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0092.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0092.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0092.962] CloseHandle (hObject=0x1ec) returned 1 [0092.975] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0092.975] SetEndOfFile (hFile=0x1dc) returned 1 [0094.022] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\appraiserxp.dll" (normalized: "c:\\windows10upgrade\\appraiserxp.dll"), lpNewFileName="C:\\Windows10Upgrade\\appraiserxp.dll.vhd" (normalized: "c:\\windows10upgrade\\appraiserxp.dll.vhd")) returned 1 [0094.023] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36cf08, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36cf08, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootsect.exe", cAlternateFileName="")) returned 1 [0094.024] CreateFileW (lpFileName="C:\\Windows10Upgrade\\bootsect.exe" (normalized: "c:\\windows10upgrade\\bootsect.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0094.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0094.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28312c8 [0094.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0094.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2831440 [0094.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0094.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0094.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2831440 [0094.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0094.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0094.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0094.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.551] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0094.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2831440 [0094.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0094.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0094.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0094.552] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0094.552] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0094.552] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.552] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312c8 | out: hHeap=0x2830000) returned 1 [0094.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0094.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0094.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0094.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xec8, lpOverlapped=0x0) returned 1 [0094.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xed0, lpOverlapped=0x0) returned 1 [0094.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0094.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0094.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0094.563] CloseHandle (hObject=0x1ec) returned 1 [0094.568] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0094.568] SetEndOfFile (hFile=0x1dc) returned 1 [0094.569] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\bootsect.exe" (normalized: "c:\\windows10upgrade\\bootsect.exe"), lpNewFileName="C:\\Windows10Upgrade\\bootsect.exe.vhd" (normalized: "c:\\windows10upgrade\\bootsect.exe.vhd")) returned 1 [0094.570] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea350dad, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea350dad, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xb08c3ee, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Configuration.ini", cAlternateFileName="CONFIG~1.INI")) returned 1 [0094.570] CreateFileW (lpFileName="C:\\Windows10Upgrade\\Configuration.ini" (normalized: "c:\\windows10upgrade\\configuration.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28312c8 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2831440 [0094.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2831440 [0094.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0094.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0094.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.577] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2831440 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0094.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0094.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0094.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0094.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0094.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0094.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312c8 | out: hHeap=0x2830000) returned 1 [0094.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0094.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd4, lpOverlapped=0x0) returned 1 [0094.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0094.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe0, lpOverlapped=0x0) returned 1 [0094.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0094.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0094.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0094.888] CloseHandle (hObject=0x1ec) returned 1 [0094.892] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0094.892] SetEndOfFile (hFile=0x1dc) returned 1 [0095.599] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\Configuration.ini" (normalized: "c:\\windows10upgrade\\configuration.ini"), lpNewFileName="C:\\Windows10Upgrade\\Configuration.ini.vhd" (normalized: "c:\\windows10upgrade\\configuration.ini.vhd")) returned 1 [0095.600] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36e29e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36e29e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xf0c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cosquery.dll", cAlternateFileName="")) returned 1 [0095.600] CreateFileW (lpFileName="C:\\Windows10Upgrade\\cosquery.dll" (normalized: "c:\\windows10upgrade\\cosquery.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0095.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0095.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0095.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28312c8 [0095.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0095.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2831440 [0095.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0095.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0095.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2831440 [0095.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0095.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0095.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0095.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0095.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0095.610] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0095.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2831440 [0095.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0095.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0095.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0095.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0095.613] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0095.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0095.613] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0095.613] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312c8 | out: hHeap=0x2830000) returned 1 [0095.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0095.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0095.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0095.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10c8, lpOverlapped=0x0) returned 1 [0095.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0095.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10d0, lpOverlapped=0x0) returned 1 [0095.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0095.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0095.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0095.620] CloseHandle (hObject=0x1ec) returned 1 [0095.623] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0095.623] SetEndOfFile (hFile=0x1dc) returned 1 [0096.490] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\cosquery.dll" (normalized: "c:\\windows10upgrade\\cosquery.dll"), lpNewFileName="C:\\Windows10Upgrade\\cosquery.dll.vhd" (normalized: "c:\\windows10upgrade\\cosquery.dll.vhd")) returned 1 [0096.491] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea370998, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea370998, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x508c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DevInv.dll", cAlternateFileName="")) returned 1 [0096.491] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DevInv.dll" (normalized: "c:\\windows10upgrade\\devinv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0096.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28312c8 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2831440 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2831440 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0096.527] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2831440 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0096.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0096.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0096.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831440 | out: hHeap=0x2830000) returned 1 [0096.529] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0096.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0096.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28312c8 | out: hHeap=0x2830000) returned 1 [0096.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0096.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0096.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0096.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0096.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0097.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0097.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c8, lpOverlapped=0x0) returned 1 [0097.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff738, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0097.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8d0, lpOverlapped=0x0) returned 1 [0097.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0097.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0097.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0097.043] CloseHandle (hObject=0x1ec) returned 1 [0097.051] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0097.051] SetEndOfFile (hFile=0x1dc) returned 1 [0099.147] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DevInv.dll" (normalized: "c:\\windows10upgrade\\devinv.dll"), lpNewFileName="C:\\Windows10Upgrade\\DevInv.dll.vhd" (normalized: "c:\\windows10upgrade\\devinv.dll.vhd")) returned 1 [0099.150] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea377ed3, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dll1", cAlternateFileName="")) returned 1 [0099.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28312c8 [0099.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x28312d8 [0099.150] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37cd05, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dll2", cAlternateFileName="")) returned 1 [0099.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831318 [0099.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2831328 [0099.150] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea380798, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea380798, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x326c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="downloader.dll", cAlternateFileName="DOWNLO~1.DLL")) returned 1 [0099.150] CreateFileW (lpFileName="C:\\Windows10Upgrade\\downloader.dll" (normalized: "c:\\windows10upgrade\\downloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0099.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0099.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0099.441] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0099.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0099.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0099.443] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0099.443] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0099.443] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0099.443] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0099.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0099.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0099.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6c8, lpOverlapped=0x0) returned 1 [0099.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff938, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6d0, lpOverlapped=0x0) returned 1 [0099.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0099.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0099.463] CloseHandle (hObject=0x1ec) returned 1 [0099.471] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0099.471] SetEndOfFile (hFile=0x1dc) returned 1 [0099.472] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\downloader.dll" (normalized: "c:\\windows10upgrade\\downloader.dll"), lpNewFileName="C:\\Windows10Upgrade\\downloader.dll.vhd" (normalized: "c:\\windows10upgrade\\downloader.dll.vhd")) returned 1 [0099.474] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea381b2a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea381b2a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9d2c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0099.474] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DW20.EXE" (normalized: "c:\\windows10upgrade\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0099.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0099.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0100.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0100.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0100.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0100.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0100.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0100.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0100.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0100.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0100.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0100.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0100.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0100.641] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0100.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0100.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0100.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0100.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0100.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0100.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0100.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0100.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0100.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0100.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0100.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0100.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0100.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0100.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0101.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0101.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c8, lpOverlapped=0x0) returned 1 [0101.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0101.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12d0, lpOverlapped=0x0) returned 1 [0101.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0101.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0101.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0101.912] CloseHandle (hObject=0x1ec) returned 1 [0101.931] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0101.931] SetEndOfFile (hFile=0x1dc) returned 1 [0102.638] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DW20.EXE" (normalized: "c:\\windows10upgrade\\dw20.exe"), lpNewFileName="C:\\Windows10Upgrade\\DW20.EXE.vhd" (normalized: "c:\\windows10upgrade\\dw20.exe.vhd")) returned 1 [0102.639] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea385605, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea385605, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xc2c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWDCW20.DLL", cAlternateFileName="")) returned 1 [0102.639] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DWDCW20.DLL" (normalized: "c:\\windows10upgrade\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0102.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0102.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0102.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0102.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0102.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0102.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.879] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0102.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0102.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0102.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0102.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0102.880] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0102.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0102.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0102.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2c8, lpOverlapped=0x0) returned 1 [0102.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2d0, lpOverlapped=0x0) returned 1 [0102.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0102.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0102.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0102.887] CloseHandle (hObject=0x1ec) returned 1 [0102.890] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0102.890] SetEndOfFile (hFile=0x1dc) returned 1 [0102.890] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DWDCW20.DLL" (normalized: "c:\\windows10upgrade\\dwdcw20.dll"), lpNewFileName="C:\\Windows10Upgrade\\DWDCW20.DLL.vhd" (normalized: "c:\\windows10upgrade\\dwdcw20.dll.vhd")) returned 1 [0102.891] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea386943, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea386943, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xb2c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0102.891] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DWTRIG20.EXE" (normalized: "c:\\windows10upgrade\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0102.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0102.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0102.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0102.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0102.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0102.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0102.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0102.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0102.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0102.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0102.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0102.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.899] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0102.899] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0102.899] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0102.899] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0102.899] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.899] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0102.900] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0102.900] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0102.900] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0102.900] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0102.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0102.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0102.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0102.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c8, lpOverlapped=0x0) returned 1 [0102.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12d0, lpOverlapped=0x0) returned 1 [0102.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0102.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0102.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0102.906] CloseHandle (hObject=0x1ec) returned 1 [0102.914] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0102.914] SetEndOfFile (hFile=0x1dc) returned 1 [0102.915] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DWTRIG20.EXE" (normalized: "c:\\windows10upgrade\\dwtrig20.exe"), lpNewFileName="C:\\Windows10Upgrade\\DWTRIG20.EXE.vhd" (normalized: "c:\\windows10upgrade\\dwtrig20.exe.vhd")) returned 1 [0102.916] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea387cd0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea387cd0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EnableWiFiTracing.cmd", cAlternateFileName="ENABLE~1.CMD")) returned 1 [0102.916] CreateFileW (lpFileName="C:\\Windows10Upgrade\\EnableWiFiTracing.cmd" (normalized: "c:\\windows10upgrade\\enablewifitracing.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0102.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0102.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0103.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0103.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0103.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0103.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0103.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0103.450] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0103.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0103.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0103.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0103.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0103.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0103.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0103.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0103.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0103.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0103.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0103.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0103.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x652, lpOverlapped=0x0) returned 1 [0103.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0103.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x660, lpOverlapped=0x0) returned 1 [0103.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0103.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0103.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0103.882] CloseHandle (hObject=0x1ec) returned 1 [0103.883] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0103.883] SetEndOfFile (hFile=0x1dc) returned 1 [0103.884] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\EnableWiFiTracing.cmd" (normalized: "c:\\windows10upgrade\\enablewifitracing.cmd"), lpNewFileName="C:\\Windows10Upgrade\\EnableWiFiTracing.cmd.vhd" (normalized: "c:\\windows10upgrade\\enablewifitracing.cmd.vhd")) returned 1 [0103.885] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea389060, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea389060, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x10cc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESDHelper.dll", cAlternateFileName="ESDHEL~1.DLL")) returned 1 [0103.885] CreateFileW (lpFileName="C:\\Windows10Upgrade\\ESDHelper.dll" (normalized: "c:\\windows10upgrade\\esdhelper.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0103.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0103.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0105.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0105.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0105.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0105.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0105.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0105.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0105.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0105.698] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0105.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0105.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0105.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0105.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0105.699] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0105.699] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0105.699] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0105.699] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0105.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0105.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0105.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0105.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0105.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0105.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0105.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0105.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc8, lpOverlapped=0x0) returned 1 [0106.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcd0, lpOverlapped=0x0) returned 1 [0106.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.229] CloseHandle (hObject=0x1ec) returned 1 [0106.232] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.232] SetEndOfFile (hFile=0x1dc) returned 1 [0106.242] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\ESDHelper.dll" (normalized: "c:\\windows10upgrade\\esdhelper.dll"), lpNewFileName="C:\\Windows10Upgrade\\ESDHelper.dll.vhd" (normalized: "c:\\windows10upgrade\\esdhelper.dll.vhd")) returned 1 [0106.243] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38cadd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38cadd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="esdstub.dll", cAlternateFileName="")) returned 1 [0106.244] CreateFileW (lpFileName="C:\\Windows10Upgrade\\esdstub.dll" (normalized: "c:\\windows10upgrade\\esdstub.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0106.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0106.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0106.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0106.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.273] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0106.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0106.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0106.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0106.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0106.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec8, lpOverlapped=0x0) returned 1 [0106.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ed0, lpOverlapped=0x0) returned 1 [0106.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.282] CloseHandle (hObject=0x1ec) returned 1 [0106.284] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.284] SetEndOfFile (hFile=0x1dc) returned 1 [0106.285] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\esdstub.dll" (normalized: "c:\\windows10upgrade\\esdstub.dll"), lpNewFileName="C:\\Windows10Upgrade\\esdstub.dll.vhd" (normalized: "c:\\windows10upgrade\\esdstub.dll.vhd")) returned 1 [0106.285] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38de7f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38de7f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GatherOSState.EXE", cAlternateFileName="GATHER~1.EXE")) returned 1 [0106.285] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GatherOSState.EXE" (normalized: "c:\\windows10upgrade\\gatherosstate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0106.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.291] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0106.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0106.292] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.292] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.292] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.292] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0106.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec8, lpOverlapped=0x0) returned 1 [0106.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ed0, lpOverlapped=0x0) returned 1 [0106.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.459] CloseHandle (hObject=0x1ec) returned 1 [0106.491] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.491] SetEndOfFile (hFile=0x1dc) returned 1 [0106.492] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GatherOSState.EXE" (normalized: "c:\\windows10upgrade\\gatherosstate.exe"), lpNewFileName="C:\\Windows10Upgrade\\GatherOSState.EXE.vhd" (normalized: "c:\\windows10upgrade\\gatherosstate.exe.vhd")) returned 1 [0106.495] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39058e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39058e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x83cc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentDeploy.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0106.495] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GetCurrentDeploy.dll" (normalized: "c:\\windows10upgrade\\getcurrentdeploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0106.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0106.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0106.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0106.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0106.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0106.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0106.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.519] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.519] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0106.519] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0106.519] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0106.519] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0106.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0106.520] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.520] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.520] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.520] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0106.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1cc8, lpOverlapped=0x0) returned 1 [0106.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1cd0, lpOverlapped=0x0) returned 1 [0106.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.717] CloseHandle (hObject=0x1ec) returned 1 [0106.859] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.859] SetEndOfFile (hFile=0x1dc) returned 1 [0106.859] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GetCurrentDeploy.dll" (normalized: "c:\\windows10upgrade\\getcurrentdeploy.dll"), lpNewFileName="C:\\Windows10Upgrade\\GetCurrentDeploy.dll.vhd" (normalized: "c:\\windows10upgrade\\getcurrentdeploy.dll.vhd")) returned 1 [0106.859] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea392ca4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea392ca4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~2.DLL")) returned 1 [0106.860] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GetCurrentOOBE.dll" (normalized: "c:\\windows10upgrade\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0106.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.866] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0106.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0106.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0106.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c8, lpOverlapped=0x0) returned 1 [0106.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12d0, lpOverlapped=0x0) returned 1 [0106.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.896] CloseHandle (hObject=0x1ec) returned 1 [0106.956] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.957] SetEndOfFile (hFile=0x1dc) returned 1 [0106.957] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GetCurrentOOBE.dll" (normalized: "c:\\windows10upgrade\\getcurrentoobe.dll"), lpNewFileName="C:\\Windows10Upgrade\\GetCurrentOOBE.dll.vhd" (normalized: "c:\\windows10upgrade\\getcurrentoobe.dll.vhd")) returned 1 [0106.957] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39539e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39539e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x11ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentRollback.EXE", cAlternateFileName="GETCUR~1.EXE")) returned 1 [0106.958] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GetCurrentRollback.EXE" (normalized: "c:\\windows10upgrade\\getcurrentrollback.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0106.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0106.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0106.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0106.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0106.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0106.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0106.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.969] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0106.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0106.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0106.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0106.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0106.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0106.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec8, lpOverlapped=0x0) returned 1 [0106.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ed0, lpOverlapped=0x0) returned 1 [0106.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.978] CloseHandle (hObject=0x1ec) returned 1 [0106.981] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.981] SetEndOfFile (hFile=0x1dc) returned 1 [0106.981] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GetCurrentRollback.EXE" (normalized: "c:\\windows10upgrade\\getcurrentrollback.exe"), lpNewFileName="C:\\Windows10Upgrade\\GetCurrentRollback.EXE.vhd" (normalized: "c:\\windows10upgrade\\getcurrentrollback.exe.vhd")) returned 1 [0106.982] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39673d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39673d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x6cc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HttpHelper.exe", cAlternateFileName="HTTPHE~1.EXE")) returned 1 [0106.982] CreateFileW (lpFileName="C:\\Windows10Upgrade\\HttpHelper.exe" (normalized: "c:\\windows10upgrade\\httphelper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0106.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0106.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0106.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0106.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.988] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0106.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0106.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.989] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0106.990] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0106.990] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0106.990] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0106.990] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0106.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0106.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0106.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc8, lpOverlapped=0x0) returned 1 [0106.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0106.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcd0, lpOverlapped=0x0) returned 1 [0106.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0106.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0106.994] CloseHandle (hObject=0x1ec) returned 1 [0106.996] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0106.996] SetEndOfFile (hFile=0x1dc) returned 1 [0106.996] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\HttpHelper.exe" (normalized: "c:\\windows10upgrade\\httphelper.exe"), lpNewFileName="C:\\Windows10Upgrade\\HttpHelper.exe.vhd" (normalized: "c:\\windows10upgrade\\httphelper.exe.vhd")) returned 1 [0106.997] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PostOOBEScript.cmd", cAlternateFileName="POSTOO~1.CMD")) returned 1 [0106.997] CreateFileW (lpFileName="C:\\Windows10Upgrade\\PostOOBEScript.cmd" (normalized: "c:\\windows10upgrade\\postoobescript.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2831368 [0107.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0107.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28314e0 [0107.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0107.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0107.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28314e0 [0107.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0107.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0107.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0107.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0107.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0107.034] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28314e0 [0107.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28327c8 [0107.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28329d8 [0107.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0107.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28329d8 | out: hHeap=0x2830000) returned 1 [0107.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28314e0 | out: hHeap=0x2830000) returned 1 [0107.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28327c8 [0107.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0107.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2831368 | out: hHeap=0x2830000) returned 1 [0107.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x241, lpOverlapped=0x0) returned 1 [0107.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffdbf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x250, lpOverlapped=0x0) returned 1 [0107.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.038] CloseHandle (hObject=0x1ec) returned 1 [0107.039] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.039] SetEndOfFile (hFile=0x1dc) returned 1 [0107.039] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\PostOOBEScript.cmd" (normalized: "c:\\windows10upgrade\\postoobescript.cmd"), lpNewFileName="C:\\Windows10Upgrade\\PostOOBEScript.cmd.vhd" (normalized: "c:\\windows10upgrade\\postoobescript.cmd.vhd")) returned 1 [0107.040] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0107.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2831368 [0107.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3c) returned 0x2831378 [0107.040] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9ef415, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea9ef415, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x624407ed, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0x3d14a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="upgrader_default.log", cAlternateFileName="UPGRAD~1.LOG")) returned 1 [0107.040] CreateFileW (lpFileName="C:\\Windows10Upgrade\\upgrader_default.log" (normalized: "c:\\windows10upgrade\\upgrader_default.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28327c8 [0107.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2832930 [0107.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0107.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2832930 [0107.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2832a38 [0107.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28327c8 | out: hHeap=0x2830000) returned 1 [0107.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832930 | out: hHeap=0x2830000) returned 1 [0107.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2832a38 | out: hHeap=0x2830000) returned 1 [0107.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.050] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.050] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.050] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.050] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28356f8 [0107.050] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2835908 [0107.050] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.050] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835908 | out: hHeap=0x2830000) returned 1 [0107.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x114a, lpOverlapped=0x0) returned 1 [0107.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeeb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1150, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1150, lpOverlapped=0x0) returned 1 [0107.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.072] CloseHandle (hObject=0x1ec) returned 1 [0107.078] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.078] SetEndOfFile (hFile=0x1dc) returned 1 [0107.078] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\upgrader_default.log" (normalized: "c:\\windows10upgrade\\upgrader_default.log"), lpNewFileName="C:\\Windows10Upgrade\\upgrader_default.log.vhd" (normalized: "c:\\windows10upgrade\\upgrader_default.log.vhd")) returned 1 [0107.137] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdc86a8, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x32fe02cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="upgrader_win10.log", cAlternateFileName="UPGRAD~2.LOG")) returned 1 [0107.137] CreateFileW (lpFileName="C:\\Windows10Upgrade\\upgrader_win10.log" (normalized: "c:\\windows10upgrade\\upgrader_win10.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28356f8 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28304a0 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2835860 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835860 | out: hHeap=0x2830000) returned 1 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.180] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28356f8 [0107.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2835908 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835908 | out: hHeap=0x2830000) returned 1 [0107.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1044, lpOverlapped=0x0) returned 1 [0107.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffefbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1050, lpOverlapped=0x0) returned 1 [0107.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.204] CloseHandle (hObject=0x1ec) returned 1 [0107.208] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.208] SetEndOfFile (hFile=0x1dc) returned 1 [0107.208] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\upgrader_win10.log" (normalized: "c:\\windows10upgrade\\upgrader_win10.log"), lpNewFileName="C:\\Windows10Upgrade\\upgrader_win10.log.vhd" (normalized: "c:\\windows10upgrade\\upgrader_win10.log.vhd")) returned 1 [0107.209] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63f06a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63f06a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x880c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wimgapi.dll", cAlternateFileName="")) returned 1 [0107.209] CreateFileW (lpFileName="C:\\Windows10Upgrade\\wimgapi.dll" (normalized: "c:\\windows10upgrade\\wimgapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28356f8 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28304a0 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28359f8 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28359f8 | out: hHeap=0x2830000) returned 1 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.230] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2835e68 [0107.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28356f8 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835e68 | out: hHeap=0x2830000) returned 1 [0107.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.231] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc8, lpOverlapped=0x0) returned 1 [0107.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd0, lpOverlapped=0x0) returned 1 [0107.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.333] CloseHandle (hObject=0x1ec) returned 1 [0107.407] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.407] SetEndOfFile (hFile=0x1dc) returned 1 [0107.407] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\wimgapi.dll" (normalized: "c:\\windows10upgrade\\wimgapi.dll"), lpNewFileName="C:\\Windows10Upgrade\\wimgapi.dll.vhd" (normalized: "c:\\windows10upgrade\\wimgapi.dll.vhd")) returned 1 [0107.408] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea642af3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea642af3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xdf8c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="windlp.dll", cAlternateFileName="")) returned 1 [0107.408] CreateFileW (lpFileName="C:\\Windows10Upgrade\\windlp.dll" (normalized: "c:\\windows10upgrade\\windlp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28356f8 [0107.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28304a0 [0107.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28358f8 [0107.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28358f8 | out: hHeap=0x2830000) returned 1 [0107.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.436] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2835e68 [0107.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28356f8 [0107.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835e68 | out: hHeap=0x2830000) returned 1 [0107.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18c8, lpOverlapped=0x0) returned 1 [0107.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe738, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18d0, lpOverlapped=0x0) returned 1 [0107.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.526] CloseHandle (hObject=0x1ec) returned 1 [0107.582] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.582] SetEndOfFile (hFile=0x1dc) returned 1 [0107.582] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\windlp.dll" (normalized: "c:\\windows10upgrade\\windlp.dll"), lpNewFileName="C:\\Windows10Upgrade\\windlp.dll.vhd" (normalized: "c:\\windows10upgrade\\windlp.dll.vhd")) returned 1 [0107.583] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64a022, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64a022, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x159ac8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10UpgraderApp.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0107.583] CreateFileW (lpFileName="C:\\Windows10Upgrade\\Windows10UpgraderApp.exe" (normalized: "c:\\windows10upgrade\\windows10upgraderapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28356f8 [0107.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28304a0 [0107.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2835a28 [0107.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835a28 | out: hHeap=0x2830000) returned 1 [0107.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.591] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2835e68 [0107.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28356f8 [0107.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835e68 | out: hHeap=0x2830000) returned 1 [0107.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.592] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.592] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.592] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.592] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ac8, lpOverlapped=0x0) returned 1 [0107.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe538, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ad0, lpOverlapped=0x0) returned 1 [0107.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.687] CloseHandle (hObject=0x1ec) returned 1 [0107.719] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.719] SetEndOfFile (hFile=0x1dc) returned 1 [0107.720] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\Windows10UpgraderApp.exe" (normalized: "c:\\windows10upgrade\\windows10upgraderapp.exe"), lpNewFileName="C:\\Windows10Upgrade\\Windows10UpgraderApp.exe.vhd" (normalized: "c:\\windows10upgrade\\windows10upgraderapp.exe.vhd")) returned 1 [0107.720] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64ee41, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64ee41, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinREBootApp32.exe", cAlternateFileName="WINREB~1.EXE")) returned 1 [0107.720] CreateFileW (lpFileName="C:\\Windows10Upgrade\\WinREBootApp32.exe" (normalized: "c:\\windows10upgrade\\winrebootapp32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28356f8 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28304a0 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28359a8 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28359a8 | out: hHeap=0x2830000) returned 1 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.770] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2835e68 [0107.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28356f8 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835e68 | out: hHeap=0x2830000) returned 1 [0107.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.771] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.771] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.771] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.771] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2c8, lpOverlapped=0x0) returned 1 [0107.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2d0, lpOverlapped=0x0) returned 1 [0107.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.780] CloseHandle (hObject=0x1ec) returned 1 [0107.783] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.783] SetEndOfFile (hFile=0x1dc) returned 1 [0107.783] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\WinREBootApp32.exe" (normalized: "c:\\windows10upgrade\\winrebootapp32.exe"), lpNewFileName="C:\\Windows10Upgrade\\WinREBootApp32.exe.vhd" (normalized: "c:\\windows10upgrade\\winrebootapp32.exe.vhd")) returned 1 [0107.784] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 1 [0107.784] CreateFileW (lpFileName="C:\\Windows10Upgrade\\WinREBootApp64.exe" (normalized: "c:\\windows10upgrade\\winrebootapp64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0107.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0107.802] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x28313c0 [0107.802] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28356f8 [0107.802] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28304a0 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2835928 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835928 | out: hHeap=0x2830000) returned 1 [0107.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.803] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0107.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28304a0 [0107.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2835e68 [0107.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28356f8 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2835e68 | out: hHeap=0x2830000) returned 1 [0107.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28356f8 | out: hHeap=0x2830000) returned 1 [0107.804] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.804] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28304a0 [0107.804] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28304a0 | out: hHeap=0x2830000) returned 1 [0107.804] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28313c0 | out: hHeap=0x2830000) returned 1 [0107.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0107.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0107.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4c8, lpOverlapped=0x0) returned 1 [0107.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0107.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4d0, lpOverlapped=0x0) returned 1 [0107.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0107.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0107.807] CloseHandle (hObject=0x1ec) returned 1 [0107.809] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0107.809] SetEndOfFile (hFile=0x1dc) returned 1 [0107.809] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\WinREBootApp64.exe" (normalized: "c:\\windows10upgrade\\winrebootapp64.exe"), lpNewFileName="C:\\Windows10Upgrade\\WinREBootApp64.exe.vhd" (normalized: "c:\\windows10upgrade\\winrebootapp64.exe.vhd")) returned 1 [0107.810] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 0 [0107.810] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0107.810] FindFirstFileW (in: lpFileName="C:\\Users\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0107.810] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.810] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0107.810] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0107.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835898 [0107.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x22) returned 0x28304a0 [0107.810] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0107.810] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835a08 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x28304d0 [0107.811] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0107.811] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28359e8 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x20) returned 0x2830510 [0107.811] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835938 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x20) returned 0x2830538 [0107.811] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0107.811] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0107.811] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835968 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2a) returned 0x2830560 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835a48 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2a) returned 0x28356f8 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0107.811] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0107.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835928 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x44) returned 0x2835730 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835978 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0x2835780 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28358f8 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3a) returned 0x28357b8 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835958 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0x2835800 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835908 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x48) returned 0x28313c0 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835888 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x2831410 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835998 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2831450 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835948 [0107.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0x2831490 [0107.812] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0 [0107.812] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0107.812] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9ef199b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ef199b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835a18 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3a) returned 0x28314f0 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef523b11, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef523b11, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28359f8 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x48) returned 0x2835e68 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28358a8 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3c) returned 0x2835eb8 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9f17b69, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9f17b69, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835a28 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0x2835f00 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835918 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2835f60 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb719116, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb719116, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835988 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0x2835fb8 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835a38 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0x2836010 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb6807c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6807c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28359a8 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3e) returned 0x2836080 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb6807c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6807c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2835a58 [0107.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x58) returned 0x28360c8 [0107.813] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28358b8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836128 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb78b738, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb78b738, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28359b8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x48) returned 0x2836180 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b317b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28359c8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x58) returned 0x28361d0 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9f8a2b5, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9f8a2b5, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28358c8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0x2836230 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28359d8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x44) returned 0x28362a0 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ecb649, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ecb649, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28358d8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x58) returned 0x28362f0 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb6a69a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6a69a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28358e8 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0x2836350 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb65a4fc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb65a4fc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836678 [0107.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0x28367c0 [0107.814] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0107.814] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0107.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf5233389, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf5233389, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf5233389, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf5233389, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ef199b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ef199b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836618 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3c) returned 0x2836820 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb6a69a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6a69a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28366c8 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x46) returned 0x2836868 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836798 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0x28368b8 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb6ccca0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6ccca0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836728 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x44) returned 0x28368f0 [0107.815] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28365e8 [0107.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0x2836d30 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836758 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x42) returned 0x2837148 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28366d8 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2837198 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28366f8 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836c80 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836608 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2e) returned 0x28371d8 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836738 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0x2836bd0 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xeb5e7d88, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5e7d88, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836718 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2a) returned 0x2837210 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb65a4fc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb65a4fc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28366b8 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x44) returned 0x2837248 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836748 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7a) returned 0x2837298 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28367a8 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3c) returned 0x2837320 [0107.816] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0107.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836708 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836b20 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb5c1ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5c1ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836768 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5a) returned 0x2837368 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836778 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x38) returned 0x28373d0 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb5c1ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5c1ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28365f8 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836d88 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28366a8 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0x2837410 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb78b738, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb78b738, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836628 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x44) returned 0x2837470 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836658 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3a) returned 0x28374c0 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836638 [0107.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x46) returned 0x2837508 [0107.817] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0107.817] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0107.817] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0107.838] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.838] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0107.838] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0107.838] FindFirstFileW (in: lpFileName="C:\\Logs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0108.005] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.242] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0108.242] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0108.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0108.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.269] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.275] CloseHandle (hObject=0x1ec) returned 1 [0108.278] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.278] SetEndOfFile (hFile=0x1dc) returned 1 [0108.278] MoveFileW (lpExistingFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), lpNewFileName="C:\\Logs\\Application.evtx.vhd" (normalized: "c:\\logs\\application.evtx.vhd")) returned 1 [0108.278] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0108.279] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0108.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0108.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.284] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.285] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.294] CloseHandle (hObject=0x1ec) returned 1 [0108.299] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.299] SetEndOfFile (hFile=0x1dc) returned 1 [0108.299] MoveFileW (lpExistingFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), lpNewFileName="C:\\Logs\\HardwareEvents.evtx.vhd" (normalized: "c:\\logs\\hardwareevents.evtx.vhd")) returned 1 [0108.303] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0108.303] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0108.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0108.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.311] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.320] CloseHandle (hObject=0x1ec) returned 1 [0108.322] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.322] SetEndOfFile (hFile=0x1dc) returned 1 [0108.322] MoveFileW (lpExistingFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), lpNewFileName="C:\\Logs\\Internet Explorer.evtx.vhd" (normalized: "c:\\logs\\internet explorer.evtx.vhd")) returned 1 [0108.324] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0108.325] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.331] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.339] CloseHandle (hObject=0x1ec) returned 1 [0108.342] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.342] SetEndOfFile (hFile=0x1dc) returned 1 [0108.343] MoveFileW (lpExistingFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), lpNewFileName="C:\\Logs\\Key Management Service.evtx.vhd" (normalized: "c:\\logs\\key management service.evtx.vhd")) returned 1 [0108.343] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0108.343] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0108.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0108.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0108.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0108.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.358] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.358] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.358] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.358] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.358] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.358] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.359] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.359] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.359] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.359] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.366] CloseHandle (hObject=0x1ec) returned 1 [0108.370] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.370] SetEndOfFile (hFile=0x1dc) returned 1 [0108.371] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.vhd")) returned 1 [0108.371] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0108.372] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0108.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0108.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0108.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0108.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.380] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.380] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.380] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.380] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.390] CloseHandle (hObject=0x1ec) returned 1 [0108.393] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.393] SetEndOfFile (hFile=0x1dc) returned 1 [0108.393] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.vhd")) returned 1 [0108.396] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0108.396] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0108.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836688 [0108.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836688 | out: hHeap=0x2830000) returned 1 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.403] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.487] CloseHandle (hObject=0x1ec) returned 1 [0108.527] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.527] SetEndOfFile (hFile=0x1dc) returned 1 [0108.528] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.vhd")) returned 1 [0108.529] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0108.529] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0108.533] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0108.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0108.533] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.533] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.533] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0108.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.533] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.534] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.541] CloseHandle (hObject=0x1ec) returned 1 [0108.543] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.543] SetEndOfFile (hFile=0x1dc) returned 1 [0108.543] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.vhd")) returned 1 [0108.544] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0108.544] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.549] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.549] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.549] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.570] CloseHandle (hObject=0x1ec) returned 1 [0108.578] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.578] SetEndOfFile (hFile=0x1dc) returned 1 [0108.578] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.vhd")) returned 1 [0108.579] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0108.579] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0108.588] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836688 [0108.588] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.588] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.588] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836688 | out: hHeap=0x2830000) returned 1 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.588] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.588] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.588] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.596] CloseHandle (hObject=0x1ec) returned 1 [0108.599] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.599] SetEndOfFile (hFile=0x1dc) returned 1 [0108.599] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.vhd")) returned 1 [0108.600] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0108.600] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.605] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.612] CloseHandle (hObject=0x1ec) returned 1 [0108.615] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.615] SetEndOfFile (hFile=0x1dc) returned 1 [0108.615] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.vhd")) returned 1 [0108.615] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0108.615] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0108.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0108.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0108.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0108.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.623] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.662] CloseHandle (hObject=0x1ec) returned 1 [0108.664] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.665] SetEndOfFile (hFile=0x1dc) returned 1 [0108.665] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.vhd")) returned 1 [0108.665] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0108.665] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.670] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.671] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.671] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.671] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.671] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.677] CloseHandle (hObject=0x1ec) returned 1 [0108.682] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.682] SetEndOfFile (hFile=0x1dc) returned 1 [0108.682] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.vhd")) returned 1 [0108.683] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0108.683] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0108.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0108.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.691] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.692] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.692] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.692] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.754] CloseHandle (hObject=0x1ec) returned 1 [0108.776] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.776] SetEndOfFile (hFile=0x1dc) returned 1 [0108.776] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.vhd")) returned 1 [0108.776] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0108.776] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0108.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0108.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0108.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0108.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.781] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.782] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.782] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.782] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.782] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.782] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0108.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0108.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0108.789] CloseHandle (hObject=0x1ec) returned 1 [0108.791] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.791] SetEndOfFile (hFile=0x1dc) returned 1 [0108.791] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.vhd")) returned 1 [0108.791] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0108.792] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0108.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0108.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0108.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0108.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0108.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0108.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0108.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0108.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0108.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0108.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0108.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.797] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0108.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0108.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0108.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0108.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0108.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0108.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0108.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0108.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0108.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0108.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0108.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0108.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0108.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.051] CloseHandle (hObject=0x1ec) returned 1 [0109.141] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.141] SetEndOfFile (hFile=0x1dc) returned 1 [0109.142] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.vhd")) returned 1 [0109.143] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0109.143] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.150] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.157] CloseHandle (hObject=0x1ec) returned 1 [0109.166] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.166] SetEndOfFile (hFile=0x1dc) returned 1 [0109.166] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.vhd")) returned 1 [0109.167] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0109.167] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836688 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836688 | out: hHeap=0x2830000) returned 1 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.172] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.179] CloseHandle (hObject=0x1ec) returned 1 [0109.182] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.182] SetEndOfFile (hFile=0x1dc) returned 1 [0109.183] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.vhd")) returned 1 [0109.183] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0109.183] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.189] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.195] CloseHandle (hObject=0x1ec) returned 1 [0109.198] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.198] SetEndOfFile (hFile=0x1dc) returned 1 [0109.198] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.vhd")) returned 1 [0109.199] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0109.199] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.204] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.214] CloseHandle (hObject=0x1ec) returned 1 [0109.217] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.217] SetEndOfFile (hFile=0x1dc) returned 1 [0109.217] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.vhd")) returned 1 [0109.221] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0109.222] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.227] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.228] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.228] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.228] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.228] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.234] CloseHandle (hObject=0x1ec) returned 1 [0109.236] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.236] SetEndOfFile (hFile=0x1dc) returned 1 [0109.237] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.vhd")) returned 1 [0109.237] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0109.237] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0109.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0109.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.243] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.251] CloseHandle (hObject=0x1ec) returned 1 [0109.258] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.259] SetEndOfFile (hFile=0x1dc) returned 1 [0109.259] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.vhd")) returned 1 [0109.259] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0109.259] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.265] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.299] CloseHandle (hObject=0x1ec) returned 1 [0109.302] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.302] SetEndOfFile (hFile=0x1dc) returned 1 [0109.302] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.vhd")) returned 1 [0109.303] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0109.303] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.317] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.317] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.317] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0109.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836688 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836688 | out: hHeap=0x2830000) returned 1 [0109.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.318] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.319] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.319] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.319] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.319] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.326] CloseHandle (hObject=0x1ec) returned 1 [0109.330] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.330] SetEndOfFile (hFile=0x1dc) returned 1 [0109.330] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.vhd")) returned 1 [0109.331] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0109.331] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0109.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0109.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0109.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0109.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.342] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.415] CloseHandle (hObject=0x1ec) returned 1 [0109.444] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.444] SetEndOfFile (hFile=0x1dc) returned 1 [0109.447] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.vhd")) returned 1 [0109.448] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0109.448] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0109.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.453] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.461] CloseHandle (hObject=0x1ec) returned 1 [0109.464] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.464] SetEndOfFile (hFile=0x1dc) returned 1 [0109.464] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.vhd")) returned 1 [0109.465] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0109.465] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0109.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0109.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.472] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.473] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.473] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.474] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.474] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.474] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.474] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.481] CloseHandle (hObject=0x1ec) returned 1 [0109.484] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.484] SetEndOfFile (hFile=0x1dc) returned 1 [0109.484] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.vhd")) returned 1 [0109.485] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0109.485] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.495] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.505] CloseHandle (hObject=0x1ec) returned 1 [0109.508] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.509] SetEndOfFile (hFile=0x1dc) returned 1 [0109.509] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.vhd")) returned 1 [0109.509] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0109.510] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.533] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0109.533] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0109.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0109.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0109.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.534] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.536] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.536] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.536] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.536] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.542] CloseHandle (hObject=0x1ec) returned 1 [0109.546] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.546] SetEndOfFile (hFile=0x1dc) returned 1 [0109.546] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.vhd")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0109.547] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0109.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0109.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.595] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.597] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.615] CloseHandle (hObject=0x1ec) returned 1 [0109.618] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.618] SetEndOfFile (hFile=0x1dc) returned 1 [0109.631] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.vhd")) returned 1 [0109.632] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0109.632] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0109.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.646] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.647] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.647] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.665] CloseHandle (hObject=0x1ec) returned 1 [0109.670] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.670] SetEndOfFile (hFile=0x1dc) returned 1 [0109.671] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.vhd")) returned 1 [0109.671] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0109.671] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0109.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0109.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.678] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.691] CloseHandle (hObject=0x1ec) returned 1 [0109.695] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.695] SetEndOfFile (hFile=0x1dc) returned 1 [0109.696] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.vhd")) returned 1 [0109.697] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0109.697] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.705] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.714] CloseHandle (hObject=0x1ec) returned 1 [0109.718] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.718] SetEndOfFile (hFile=0x1dc) returned 1 [0109.718] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.vhd")) returned 1 [0109.719] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0109.719] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0109.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0109.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.737] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0109.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0109.737] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.737] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.737] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.737] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.737] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.739] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.739] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.739] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.739] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.770] CloseHandle (hObject=0x1ec) returned 1 [0109.773] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.774] SetEndOfFile (hFile=0x1dc) returned 1 [0109.774] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.vhd")) returned 1 [0109.775] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0109.775] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0109.812] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.812] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.812] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.812] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.812] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.812] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.813] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.813] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.821] CloseHandle (hObject=0x1ec) returned 1 [0109.829] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.829] SetEndOfFile (hFile=0x1dc) returned 1 [0109.829] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.vhd")) returned 1 [0109.830] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0109.830] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0109.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0109.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0109.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0109.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.837] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.838] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.838] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.838] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.838] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.845] CloseHandle (hObject=0x1ec) returned 1 [0109.939] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.939] SetEndOfFile (hFile=0x1dc) returned 1 [0109.940] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.vhd")) returned 1 [0109.940] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0109.940] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.949] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0109.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0109.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0109.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0109.958] CloseHandle (hObject=0x1ec) returned 1 [0109.962] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.962] SetEndOfFile (hFile=0x1dc) returned 1 [0109.962] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.vhd")) returned 1 [0109.963] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0109.963] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0109.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0109.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0109.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0109.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.969] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.969] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0109.969] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0109.970] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0109.970] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0109.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0109.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0109.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0109.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0109.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0109.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0109.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0109.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0109.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.076] CloseHandle (hObject=0x1ec) returned 1 [0110.101] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.101] SetEndOfFile (hFile=0x1dc) returned 1 [0110.102] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.vhd")) returned 1 [0110.102] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0110.102] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.108] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.108] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.109] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.115] CloseHandle (hObject=0x1ec) returned 1 [0110.118] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.118] SetEndOfFile (hFile=0x1dc) returned 1 [0110.118] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.vhd")) returned 1 [0110.118] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0110.119] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.126] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.137] CloseHandle (hObject=0x1ec) returned 1 [0110.142] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.142] SetEndOfFile (hFile=0x1dc) returned 1 [0110.142] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.vhd")) returned 1 [0110.143] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0110.143] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0110.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.150] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.152] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.159] CloseHandle (hObject=0x1ec) returned 1 [0110.163] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.163] SetEndOfFile (hFile=0x1dc) returned 1 [0110.163] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.vhd")) returned 1 [0110.164] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0110.164] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0110.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0110.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.295] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.421] CloseHandle (hObject=0x1ec) returned 1 [0110.426] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.426] SetEndOfFile (hFile=0x1dc) returned 1 [0110.427] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.vhd")) returned 1 [0110.428] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0110.428] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.437] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.446] CloseHandle (hObject=0x1ec) returned 1 [0110.448] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.449] SetEndOfFile (hFile=0x1dc) returned 1 [0110.449] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.vhd")) returned 1 [0110.450] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0110.450] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0110.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0110.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0110.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0110.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.467] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.468] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.475] CloseHandle (hObject=0x1ec) returned 1 [0110.482] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.482] SetEndOfFile (hFile=0x1dc) returned 1 [0110.482] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.vhd")) returned 1 [0110.483] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0110.483] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0110.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0110.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.489] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.500] CloseHandle (hObject=0x1ec) returned 1 [0110.502] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.502] SetEndOfFile (hFile=0x1dc) returned 1 [0110.502] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.vhd")) returned 1 [0110.503] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0110.503] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ff0 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ff0 | out: hHeap=0x2830000) returned 1 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.512] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.533] CloseHandle (hObject=0x1ec) returned 1 [0110.538] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.538] SetEndOfFile (hFile=0x1dc) returned 1 [0110.539] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.vhd")) returned 1 [0110.539] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0110.540] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.573] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.575] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.575] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.575] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.575] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.582] CloseHandle (hObject=0x1ec) returned 1 [0110.586] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.586] SetEndOfFile (hFile=0x1dc) returned 1 [0110.587] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.vhd")) returned 1 [0110.587] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0110.587] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.594] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.594] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.594] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0110.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.595] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.604] CloseHandle (hObject=0x1ec) returned 1 [0110.610] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.610] SetEndOfFile (hFile=0x1dc) returned 1 [0110.611] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.vhd")) returned 1 [0110.611] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0110.611] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0110.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.619] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.628] CloseHandle (hObject=0x1ec) returned 1 [0110.634] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.634] SetEndOfFile (hFile=0x1dc) returned 1 [0110.635] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.vhd")) returned 1 [0110.636] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0110.636] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0110.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.643] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.653] CloseHandle (hObject=0x1ec) returned 1 [0110.659] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.659] SetEndOfFile (hFile=0x1dc) returned 1 [0110.659] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.vhd")) returned 1 [0110.660] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0110.660] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0110.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0110.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.670] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.671] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.671] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.671] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.671] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.679] CloseHandle (hObject=0x1ec) returned 1 [0110.688] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.688] SetEndOfFile (hFile=0x1dc) returned 1 [0110.688] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.vhd")) returned 1 [0110.689] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0110.689] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.696] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.696] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.697] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.699] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.699] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.699] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.699] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.715] CloseHandle (hObject=0x1ec) returned 1 [0110.722] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.722] SetEndOfFile (hFile=0x1dc) returned 1 [0110.723] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.vhd")) returned 1 [0110.723] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0110.724] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.736] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.738] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.738] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.738] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.738] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.761] CloseHandle (hObject=0x1ec) returned 1 [0110.771] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.771] SetEndOfFile (hFile=0x1dc) returned 1 [0110.771] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.vhd")) returned 1 [0110.774] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0110.775] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.793] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.795] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.795] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.804] CloseHandle (hObject=0x1ec) returned 1 [0110.807] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.807] SetEndOfFile (hFile=0x1dc) returned 1 [0110.808] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.vhd")) returned 1 [0110.808] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0110.808] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0110.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0110.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0110.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0110.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.816] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.827] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0110.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0110.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0110.887] CloseHandle (hObject=0x1ec) returned 1 [0110.911] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.911] SetEndOfFile (hFile=0x1dc) returned 1 [0110.911] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.vhd")) returned 1 [0110.926] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0110.926] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0110.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0110.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0110.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0110.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0110.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0110.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0110.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0110.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0110.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0110.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0110.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.940] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0110.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0110.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0110.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0110.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0110.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0110.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0110.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0110.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0110.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0110.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0110.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0110.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0110.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0111.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0111.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0111.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0111.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0111.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0111.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0111.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0111.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0111.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0111.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0111.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0111.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0111.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0111.403] CloseHandle (hObject=0x1ec) returned 1 [0111.406] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0111.406] SetEndOfFile (hFile=0x1dc) returned 1 [0111.406] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.vhd")) returned 1 [0111.407] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0111.407] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0111.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0111.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0112.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0112.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0112.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0112.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0112.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0112.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836688 [0112.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0112.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0112.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836688 | out: hHeap=0x2830000) returned 1 [0112.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0112.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0112.027] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0112.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0112.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0112.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0112.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0112.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0112.028] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0112.028] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0112.028] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0112.028] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0112.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0112.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0113.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0113.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0115.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0115.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0115.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0115.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0115.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0115.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0115.957] CloseHandle (hObject=0x1ec) returned 1 [0115.963] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0115.963] SetEndOfFile (hFile=0x1dc) returned 1 [0115.963] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.vhd")) returned 1 [0115.966] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0115.966] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0115.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0115.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0116.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0116.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0116.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.009] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0116.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0116.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0116.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0116.011] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.011] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.011] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.011] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0116.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0116.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0116.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0116.019] CloseHandle (hObject=0x1ec) returned 1 [0116.022] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.022] SetEndOfFile (hFile=0x1dc) returned 1 [0116.022] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.vhd")) returned 1 [0116.023] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0116.023] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0116.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0116.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0116.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0116.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.155] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0116.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0116.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0116.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0116.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0116.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0116.157] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.157] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.157] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0116.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0116.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0116.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0116.379] CloseHandle (hObject=0x1ec) returned 1 [0116.382] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.382] SetEndOfFile (hFile=0x1dc) returned 1 [0116.382] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.vhd")) returned 1 [0116.383] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0116.383] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0116.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0116.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0116.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0116.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0116.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0116.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0116.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0116.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0116.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.464] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0116.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0116.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0116.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0116.465] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0116.465] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0116.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0116.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0116.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0116.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0116.485] CloseHandle (hObject=0x1ec) returned 1 [0116.490] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.490] SetEndOfFile (hFile=0x1dc) returned 1 [0116.491] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.vhd")) returned 1 [0116.492] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0116.492] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0116.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0116.572] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0116.572] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.572] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0116.572] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.572] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.572] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0116.572] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0116.572] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0116.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0116.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0116.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0116.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0116.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0116.582] CloseHandle (hObject=0x1ec) returned 1 [0116.587] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.587] SetEndOfFile (hFile=0x1dc) returned 1 [0116.588] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.vhd")) returned 1 [0116.589] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0116.590] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0116.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.752] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0116.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0116.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0116.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0116.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0116.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0116.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0116.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0116.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0116.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0116.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0116.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0116.762] CloseHandle (hObject=0x1ec) returned 1 [0116.765] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0116.765] SetEndOfFile (hFile=0x1dc) returned 1 [0116.765] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.vhd")) returned 1 [0116.766] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0116.767] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0116.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0116.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0117.091] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0117.091] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0117.091] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0117.091] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0117.092] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0117.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0117.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.092] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0117.092] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0117.092] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0117.092] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0117.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0117.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0117.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0117.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0117.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0117.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0117.284] CloseHandle (hObject=0x1ec) returned 1 [0117.287] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.287] SetEndOfFile (hFile=0x1dc) returned 1 [0117.287] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.vhd")) returned 1 [0117.288] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0117.289] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0117.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0117.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0117.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0117.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.295] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.295] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0117.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0117.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0117.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0117.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0117.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0117.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0117.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0117.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0117.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0117.307] CloseHandle (hObject=0x1ec) returned 1 [0117.310] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.310] SetEndOfFile (hFile=0x1dc) returned 1 [0117.310] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.vhd")) returned 1 [0117.311] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0117.311] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0117.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0117.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0117.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0117.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0117.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0117.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836688 [0117.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0117.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836688 | out: hHeap=0x2830000) returned 1 [0117.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.538] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0117.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0117.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0117.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0117.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0117.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0117.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0117.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0117.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0117.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0117.549] CloseHandle (hObject=0x1ec) returned 1 [0117.554] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.554] SetEndOfFile (hFile=0x1dc) returned 1 [0117.555] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.vhd")) returned 1 [0117.556] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0117.556] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0117.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0117.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0117.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0117.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.564] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0117.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0117.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0117.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0117.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.567] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0117.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0117.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0117.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0117.676] CloseHandle (hObject=0x1ec) returned 1 [0117.679] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.679] SetEndOfFile (hFile=0x1dc) returned 1 [0117.799] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.vhd")) returned 1 [0117.803] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0117.803] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0117.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0117.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0117.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0117.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0117.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0117.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0117.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.815] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0117.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0117.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0117.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0117.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0117.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0117.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0117.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0117.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0117.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0117.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0117.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0117.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0117.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0117.827] CloseHandle (hObject=0x1ec) returned 1 [0117.902] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0117.902] SetEndOfFile (hFile=0x1dc) returned 1 [0117.903] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.vhd")) returned 1 [0117.904] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0117.904] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0117.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0117.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0118.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0118.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0118.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0118.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0118.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0118.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0118.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0118.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0118.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.542] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0118.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0118.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0118.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0118.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0118.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0118.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.543] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0118.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0118.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0118.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0118.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0118.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0118.745] CloseHandle (hObject=0x1ec) returned 1 [0118.748] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.748] SetEndOfFile (hFile=0x1dc) returned 1 [0118.748] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.vhd")) returned 1 [0118.749] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0118.749] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0118.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.937] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0118.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0118.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0118.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0118.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0118.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0118.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0118.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0118.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0118.961] CloseHandle (hObject=0x1ec) returned 1 [0118.966] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.966] SetEndOfFile (hFile=0x1dc) returned 1 [0118.967] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.vhd")) returned 1 [0118.967] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0118.967] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0118.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0118.977] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0118.977] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.978] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0118.978] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0118.978] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0118.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0118.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0118.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0118.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0118.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0118.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0118.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0118.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0118.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0118.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0118.991] CloseHandle (hObject=0x1ec) returned 1 [0118.994] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0118.994] SetEndOfFile (hFile=0x1dc) returned 1 [0118.994] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.vhd")) returned 1 [0118.995] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0118.995] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.090] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.092] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.092] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.114] CloseHandle (hObject=0x1ec) returned 1 [0119.119] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.119] SetEndOfFile (hFile=0x1dc) returned 1 [0119.119] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.vhd")) returned 1 [0119.120] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0119.120] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0119.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0119.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0119.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0119.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.127] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.138] CloseHandle (hObject=0x1ec) returned 1 [0119.172] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.172] SetEndOfFile (hFile=0x1dc) returned 1 [0119.172] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.vhd")) returned 1 [0119.173] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0119.174] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ff0 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ff0 | out: hHeap=0x2830000) returned 1 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.180] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.190] CloseHandle (hObject=0x1ec) returned 1 [0119.194] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.194] SetEndOfFile (hFile=0x1dc) returned 1 [0119.194] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.vhd")) returned 1 [0119.195] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0119.195] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0119.210] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0119.210] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.210] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.210] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.210] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.210] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.212] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.212] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.212] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.212] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.369] CloseHandle (hObject=0x1ec) returned 1 [0119.374] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.374] SetEndOfFile (hFile=0x1dc) returned 1 [0119.374] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.vhd")) returned 1 [0119.375] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0119.375] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0119.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0119.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.381] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.390] CloseHandle (hObject=0x1ec) returned 1 [0119.394] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.394] SetEndOfFile (hFile=0x1dc) returned 1 [0119.395] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.vhd")) returned 1 [0119.395] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0119.395] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0119.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0119.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0119.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0119.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.444] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.445] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.445] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.456] CloseHandle (hObject=0x1ec) returned 1 [0119.459] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.459] SetEndOfFile (hFile=0x1dc) returned 1 [0119.459] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.vhd")) returned 1 [0119.461] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0119.461] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ff0 [0119.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ff0 | out: hHeap=0x2830000) returned 1 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0119.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.467] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.467] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.467] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.470] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.470] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.470] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.470] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.477] CloseHandle (hObject=0x1ec) returned 1 [0119.480] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.480] SetEndOfFile (hFile=0x1dc) returned 1 [0119.480] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.vhd")) returned 1 [0119.481] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0119.481] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28366e8 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28366e8 | out: hHeap=0x2830000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.553] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.563] CloseHandle (hObject=0x1ec) returned 1 [0119.566] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.566] SetEndOfFile (hFile=0x1dc) returned 1 [0119.566] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.vhd")) returned 1 [0119.567] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0119.567] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0119.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0119.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.648] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.658] CloseHandle (hObject=0x1ec) returned 1 [0119.662] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.662] SetEndOfFile (hFile=0x1dc) returned 1 [0119.662] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.vhd")) returned 1 [0119.663] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0119.663] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0119.674] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0119.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.675] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.676] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.676] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.676] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.741] CloseHandle (hObject=0x1ec) returned 1 [0119.746] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.746] SetEndOfFile (hFile=0x1dc) returned 1 [0119.747] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.vhd")) returned 1 [0119.748] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0119.748] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0119.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836698 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836698 | out: hHeap=0x2830000) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.755] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0119.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0119.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0119.756] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.756] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0119.756] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0119.756] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0119.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0119.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0119.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0119.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0119.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0119.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0119.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0119.976] CloseHandle (hObject=0x1ec) returned 1 [0120.112] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.113] SetEndOfFile (hFile=0x1dc) returned 1 [0120.113] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.vhd")) returned 1 [0120.116] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0120.116] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0120.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0120.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0120.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0120.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0120.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0120.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0120.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0120.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0120.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.123] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.123] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0120.123] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0120.123] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0120.123] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0120.123] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0120.123] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0120.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0120.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0120.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0120.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0120.136] CloseHandle (hObject=0x1ec) returned 1 [0120.140] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.140] SetEndOfFile (hFile=0x1dc) returned 1 [0120.140] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.vhd")) returned 1 [0120.141] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0120.141] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0120.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0120.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0120.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f98 [0120.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f98 | out: hHeap=0x2830000) returned 1 [0120.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0120.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0120.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0120.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0120.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.148] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0120.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0120.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0120.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0120.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0120.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0120.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0120.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0120.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0120.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0120.233] CloseHandle (hObject=0x1ec) returned 1 [0120.236] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.236] SetEndOfFile (hFile=0x1dc) returned 1 [0120.237] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.vhd")) returned 1 [0120.238] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0120.238] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0120.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0120.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836698 [0120.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0120.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836698 | out: hHeap=0x2830000) returned 1 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.307] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0120.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0120.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0120.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0120.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0120.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0120.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0120.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0120.498] CloseHandle (hObject=0x1ec) returned 1 [0120.530] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.530] SetEndOfFile (hFile=0x1dc) returned 1 [0120.530] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.vhd")) returned 1 [0120.531] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0120.531] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0120.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0120.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0120.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0120.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0120.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0120.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836668 [0120.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0120.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836668 | out: hHeap=0x2830000) returned 1 [0120.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.586] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0120.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0120.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0120.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0120.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0120.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0120.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.587] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.588] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0120.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0120.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0120.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0120.701] CloseHandle (hObject=0x1ec) returned 1 [0120.824] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.824] SetEndOfFile (hFile=0x1dc) returned 1 [0120.825] MoveFileW (lpExistingFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), lpNewFileName="C:\\Logs\\Security.evtx.vhd" (normalized: "c:\\logs\\security.evtx.vhd")) returned 1 [0120.825] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0120.825] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0120.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0120.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0120.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0120.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0120.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0120.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0120.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0120.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0120.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.833] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0120.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0120.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0120.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0120.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0120.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0120.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.834] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0120.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0120.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0120.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0120.973] CloseHandle (hObject=0x1ec) returned 1 [0120.978] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.978] SetEndOfFile (hFile=0x1dc) returned 1 [0120.979] MoveFileW (lpExistingFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), lpNewFileName="C:\\Logs\\Setup.evtx.vhd" (normalized: "c:\\logs\\setup.evtx.vhd")) returned 1 [0120.979] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0120.980] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0120.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0120.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0120.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0120.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0120.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836648 [0120.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0120.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836648 | out: hHeap=0x2830000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.989] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.989] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0120.989] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0120.989] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0120.989] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0120.989] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0120.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0120.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0120.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0120.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0120.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0120.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0120.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0121.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0121.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0121.219] CloseHandle (hObject=0x1ec) returned 1 [0121.293] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.293] SetEndOfFile (hFile=0x1dc) returned 1 [0121.296] MoveFileW (lpExistingFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), lpNewFileName="C:\\Logs\\System.evtx.vhd" (normalized: "c:\\logs\\system.evtx.vhd")) returned 1 [0121.299] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0121.299] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0121.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.320] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837558 [0121.320] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28376d0 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2837838 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836788 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837838 | out: hHeap=0x2830000) returned 1 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836788 | out: hHeap=0x2830000) returned 1 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0121.321] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28376d0 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2837720 [0121.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2837930 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837720 | out: hHeap=0x2830000) returned 1 [0121.321] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837930 | out: hHeap=0x2830000) returned 1 [0121.323] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0121.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28376d0 [0121.323] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28376d0 | out: hHeap=0x2830000) returned 1 [0121.323] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837558 | out: hHeap=0x2830000) returned 1 [0121.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0121.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0121.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0121.368] CloseHandle (hObject=0x1ec) returned 1 [0121.374] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.374] SetEndOfFile (hFile=0x1dc) returned 1 [0121.375] MoveFileW (lpExistingFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), lpNewFileName="C:\\Logs\\Windows PowerShell.evtx.vhd" (normalized: "c:\\logs\\windows powershell.evtx.vhd")) returned 1 [0121.376] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0121.376] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0121.376] FindFirstFileW (in: lpFileName="C:\\ESD\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0121.380] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.380] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.380] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0121.380] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24398 [0121.383] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.384] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0121.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836648 [0121.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837558 [0121.384] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0121.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836788 [0121.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837598 [0121.384] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0121.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28366e8 [0121.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x28375d8 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836668 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837618 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836698 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837658 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836688 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837698 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28364b8 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x28376d8 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836528 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837b00 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836588 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837b80 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28363e8 [0121.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837840 [0121.385] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28364d8 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837740 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836538 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837d40 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28364c8 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837e00 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836498 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837780 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836488 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x28377c0 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28364a8 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837880 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836598 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837d80 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28364e8 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837a80 [0121.386] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0121.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28365a8 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837bc0 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28365c8 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837ac0 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28364f8 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x28379c0 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836508 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837a00 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28363f8 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837c00 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836518 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837980 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836478 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837e40 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836558 [0121.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3a) returned 0x2837f20 [0121.387] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0121.387] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0121.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837f68 [0121.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28380e0 [0121.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0121.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838248 [0121.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836428 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838248 | out: hHeap=0x2830000) returned 1 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836428 | out: hHeap=0x2830000) returned 1 [0121.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28380e0 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.462] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0121.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28380e0 [0121.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838130 [0121.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838340 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838130 | out: hHeap=0x2830000) returned 1 [0121.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0121.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28380e0 [0121.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837f68 | out: hHeap=0x2830000) returned 1 [0121.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ef6, lpOverlapped=0x0) returned 1 [0121.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe10a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f00, lpOverlapped=0x0) returned 1 [0121.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0121.468] CloseHandle (hObject=0x1ec) returned 1 [0121.470] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.470] SetEndOfFile (hFile=0x1dc) returned 1 [0121.471] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), lpNewFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.vhd" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.vhd")) returned 1 [0121.472] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0121.472] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0121.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837f68 [0121.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28380e0 [0121.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0121.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0121.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838248 [0121.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0121.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838248 | out: hHeap=0x2830000) returned 1 [0121.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0121.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28380e0 [0121.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.480] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0121.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28380e0 [0121.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838130 [0121.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838340 [0121.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838130 | out: hHeap=0x2830000) returned 1 [0121.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0121.482] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.482] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28380e0 [0121.482] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28380e0 | out: hHeap=0x2830000) returned 1 [0121.482] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837f68 | out: hHeap=0x2830000) returned 1 [0121.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19d5, lpOverlapped=0x0) returned 1 [0121.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe62b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19e0, lpOverlapped=0x0) returned 1 [0121.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0121.490] CloseHandle (hObject=0x1ec) returned 1 [0121.494] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.495] SetEndOfFile (hFile=0x1dc) returned 1 [0121.495] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), lpNewFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.vhd")) returned 1 [0121.496] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0121.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28365d8 [0121.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3e) returned 0x2837f68 [0121.496] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0121.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836428 [0121.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3e) returned 0x2837fb0 [0121.496] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0121.496] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0121.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.545] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0121.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0121.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0121.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0121.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0121.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe2c, lpOverlapped=0x0) returned 1 [0121.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe30, lpOverlapped=0x0) returned 1 [0121.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0121.548] CloseHandle (hObject=0x1ec) returned 1 [0121.550] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.550] SetEndOfFile (hFile=0x1dc) returned 1 [0121.551] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\header.bmp.vhd" (normalized: "c:\\588bce7c90097ed212\\header.bmp.vhd")) returned 1 [0121.552] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0121.552] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0121.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0121.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0121.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0121.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0121.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0121.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0121.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0121.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0121.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0121.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0121.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.563] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0121.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0121.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0121.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0121.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0121.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0121.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0121.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0121.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0121.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0121.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0121.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0121.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0122.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0122.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0122.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0125.306] CloseHandle (hObject=0x1ec) returned 1 [0126.540] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.541] SetEndOfFile (hFile=0x1dc) returned 1 [0126.542] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.vhd")) returned 1 [0126.545] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0126.545] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0126.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0126.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0126.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0126.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0126.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0126.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0126.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0126.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0126.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0126.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0126.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0126.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0126.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0126.621] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0126.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0126.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0126.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0126.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0126.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0126.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0126.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0126.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0126.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0126.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0126.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0126.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x200, lpOverlapped=0x0) returned 1 [0127.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x200, lpOverlapped=0x0) returned 1 [0127.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0127.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0127.310] CloseHandle (hObject=0x1ec) returned 1 [0127.427] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.427] SetEndOfFile (hFile=0x1dc) returned 1 [0127.427] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.vhd")) returned 1 [0127.428] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0127.428] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0127.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.441] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0127.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0127.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0127.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.442] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0127.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0127.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0127.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0127.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0127.550] CloseHandle (hObject=0x1ec) returned 1 [0127.672] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.672] SetEndOfFile (hFile=0x1dc) returned 1 [0127.672] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.vhd")) returned 1 [0127.673] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0127.673] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0127.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0127.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0127.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0127.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0127.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0127.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.680] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0127.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0127.681] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0127.681] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0127.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0127.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0127.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0127.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0127.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0127.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0128.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0128.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0128.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0133.329] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.330] SetEndOfFile (hFile=0x1dc) returned 1 [0133.331] WriteFile (in: hFile=0x1dc, lpBuffer=0x79f2b8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79f2b8*, lpNumberOfBytesWritten=0x79a474*=0x50, lpOverlapped=0x0) returned 1 [0133.332] WriteFile (in: hFile=0x1dc, lpBuffer=0x948afc*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x948afc*, lpNumberOfBytesWritten=0x79a474*=0x4, lpOverlapped=0x0) returned 1 [0133.333] WriteFile (in: hFile=0x1dc, lpBuffer=0x79efd8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79efd8*, lpNumberOfBytesWritten=0x79a474*=0x40, lpOverlapped=0x0) returned 1 [0133.333] WriteFile (in: hFile=0x1dc, lpBuffer=0x948afc*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x948afc*, lpNumberOfBytesWritten=0x79a474*=0x4, lpOverlapped=0x0) returned 1 [0133.333] WriteFile (in: hFile=0x1dc, lpBuffer=0x79a458*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79a458*, lpNumberOfBytesWritten=0x79a474*=0x8, lpOverlapped=0x0) returned 1 [0133.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffe000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0133.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0133.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0133.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0133.855] CloseHandle (hObject=0x1ec) returned 1 [0135.713] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.713] SetEndOfFile (hFile=0x1dc) returned 1 [0135.973] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.vhd")) returned 1 [0135.976] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0135.976] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0135.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0135.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0135.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0135.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0135.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0135.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0135.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0135.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0135.986] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0135.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0135.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0135.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0135.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0135.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0135.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0135.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0135.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0135.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0135.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0135.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0135.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0135.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0135.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0135.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0135.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0136.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0136.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0136.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0136.166] CloseHandle (hObject=0x1ec) returned 1 [0136.384] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.384] SetEndOfFile (hFile=0x1dc) returned 1 [0136.713] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.vhd")) returned 1 [0136.715] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0136.716] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0136.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0136.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0136.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0136.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0136.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0136.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0136.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836418 [0136.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0136.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0136.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836418 | out: hHeap=0x2830000) returned 1 [0136.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0136.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0136.724] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0136.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0136.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0136.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0136.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0136.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0136.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0136.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0136.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0136.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0136.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0136.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0136.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0136.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0136.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0136.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0136.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0136.957] CloseHandle (hObject=0x1ec) returned 1 [0136.969] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0136.971] SetEndOfFile (hFile=0x1dc) returned 1 [0137.171] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.vhd")) returned 1 [0137.172] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0137.172] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0137.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.179] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0137.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0137.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0137.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0137.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0137.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6ae, lpOverlapped=0x0) returned 1 [0137.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff952, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6b0, lpOverlapped=0x0) returned 1 [0137.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0137.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0137.417] CloseHandle (hObject=0x1ec) returned 1 [0137.424] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.424] SetEndOfFile (hFile=0x1dc) returned 1 [0137.424] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.vhd")) returned 1 [0137.425] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0137.425] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0137.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0137.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0137.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0137.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0137.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0137.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.432] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0137.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0137.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0137.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0137.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0137.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0137.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0137.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1200, lpOverlapped=0x0) returned 1 [0137.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1200, lpOverlapped=0x0) returned 1 [0137.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0137.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0137.773] CloseHandle (hObject=0x1ec) returned 1 [0137.783] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.783] SetEndOfFile (hFile=0x1dc) returned 1 [0137.783] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.vhd")) returned 1 [0137.784] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0137.784] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0137.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0137.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0137.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0137.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0137.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0137.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0137.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0137.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0137.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0137.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0137.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0137.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.793] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0137.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0137.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0137.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0137.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0137.793] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0137.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0137.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0137.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0137.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0137.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0137.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1200, lpOverlapped=0x0) returned 1 [0137.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1200, lpOverlapped=0x0) returned 1 [0137.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0137.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0137.896] CloseHandle (hObject=0x1ec) returned 1 [0137.920] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0137.920] SetEndOfFile (hFile=0x1dc) returned 1 [0137.920] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.vhd")) returned 1 [0137.921] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0137.921] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0137.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0137.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0138.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0138.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0138.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0138.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0138.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0138.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0138.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0138.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0138.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0138.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0138.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0138.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0138.039] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0138.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0138.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0138.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0138.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0138.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0138.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0138.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0138.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0138.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0138.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0138.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0138.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0138.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0138.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1148, lpOverlapped=0x0) returned 1 [0142.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeeb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1150, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1150, lpOverlapped=0x0) returned 1 [0142.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0142.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0142.689] CloseHandle (hObject=0x1ec) returned 1 [0142.724] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.724] SetEndOfFile (hFile=0x1dc) returned 1 [0142.816] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), lpNewFileName="C:\\588bce7c90097ed212\\Setup.exe.vhd" (normalized: "c:\\588bce7c90097ed212\\setup.exe.vhd")) returned 1 [0142.924] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0142.924] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0142.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0142.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0142.945] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836468 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836468 | out: hHeap=0x2830000) returned 1 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0142.946] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0142.946] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0142.946] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0142.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0142.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0142.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0142.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0142.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0142.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0142.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0142.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0142.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0143.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1158, lpOverlapped=0x0) returned 1 [0143.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0143.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1160, lpOverlapped=0x0) returned 1 [0143.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0143.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0143.884] CloseHandle (hObject=0x1ec) returned 1 [0143.900] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0143.900] SetEndOfFile (hFile=0x1dc) returned 1 [0143.900] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), lpNewFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.vhd")) returned 1 [0143.901] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0143.901] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836418 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836418 | out: hHeap=0x2830000) returned 1 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.067] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.069] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.069] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.069] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x150, lpOverlapped=0x0) returned 1 [0144.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffeb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x150, lpOverlapped=0x0) returned 1 [0144.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.091] CloseHandle (hObject=0x1ec) returned 1 [0144.101] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.101] SetEndOfFile (hFile=0x1dc) returned 1 [0144.101] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.vhd")) returned 1 [0144.102] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0144.102] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.189] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x15a8, lpOverlapped=0x0) returned 1 [0144.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffea58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x15b0, lpOverlapped=0x0) returned 1 [0144.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.202] CloseHandle (hObject=0x1ec) returned 1 [0144.206] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.206] SetEndOfFile (hFile=0x1dc) returned 1 [0144.207] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.vhd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.vhd")) returned 1 [0144.207] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0144.207] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.214] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.215] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.215] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.215] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1758, lpOverlapped=0x0) returned 1 [0144.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1760, lpOverlapped=0x0) returned 1 [0144.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.222] CloseHandle (hObject=0x1ec) returned 1 [0144.226] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.226] SetEndOfFile (hFile=0x1dc) returned 1 [0144.512] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.vhd" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.vhd")) returned 1 [0144.513] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0144.513] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.522] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.522] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.522] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0144.522] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0144.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0144.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0144.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.523] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.524] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x78, lpOverlapped=0x0) returned 1 [0144.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x80, lpOverlapped=0x0) returned 1 [0144.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.529] CloseHandle (hObject=0x1ec) returned 1 [0144.538] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.538] SetEndOfFile (hFile=0x1dc) returned 1 [0144.539] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.vhd" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.vhd")) returned 1 [0144.539] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0144.540] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.547] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.548] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.548] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.548] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.548] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1420, lpOverlapped=0x0) returned 1 [0144.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebe0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1420, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1420, lpOverlapped=0x0) returned 1 [0144.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.664] CloseHandle (hObject=0x1ec) returned 1 [0144.668] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.668] SetEndOfFile (hFile=0x1dc) returned 1 [0144.669] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), lpNewFileName="C:\\588bce7c90097ed212\\sqmapi.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.vhd")) returned 1 [0144.670] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0144.670] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0144.677] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0144.677] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.677] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.677] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.677] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.677] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.677] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1704, lpOverlapped=0x0) returned 1 [0144.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1710, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1710, lpOverlapped=0x0) returned 1 [0144.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.682] CloseHandle (hObject=0x1ec) returned 1 [0144.687] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.687] SetEndOfFile (hFile=0x1dc) returned 1 [0144.688] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Strings.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\strings.xml.vhd")) returned 1 [0144.693] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0144.693] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0144.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0144.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0144.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0144.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.819] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x17f2, lpOverlapped=0x0) returned 1 [0144.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe80e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1800, lpOverlapped=0x0) returned 1 [0144.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.836] CloseHandle (hObject=0x1ec) returned 1 [0144.838] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.838] SetEndOfFile (hFile=0x1dc) returned 1 [0144.838] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\UiInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.vhd")) returned 1 [0144.839] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0144.839] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0144.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0144.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0144.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0144.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.847] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0144.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0144.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0144.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0144.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0144.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0144.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0144.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0144.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0144.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1688, lpOverlapped=0x0) returned 1 [0144.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe978, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0144.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1690, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1690, lpOverlapped=0x0) returned 1 [0144.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0144.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0144.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0144.858] CloseHandle (hObject=0x1ec) returned 1 [0145.075] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.075] SetEndOfFile (hFile=0x1dc) returned 1 [0145.396] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\watermark.bmp.vhd" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.vhd")) returned 1 [0145.398] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0145.398] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0145.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0145.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0145.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0145.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0145.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0145.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0145.408] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0145.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0145.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0145.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0145.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0145.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0145.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0145.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0145.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0145.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0145.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0145.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0145.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0146.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0146.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0146.454] CloseHandle (hObject=0x1ec) returned 1 [0147.063] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.063] SetEndOfFile (hFile=0x1dc) returned 1 [0147.064] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.vhd")) returned 1 [0147.065] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0147.065] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0147.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0147.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0147.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836548 [0147.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0147.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0147.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836548 | out: hHeap=0x2830000) returned 1 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0147.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0147.088] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0147.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0147.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0147.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0147.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0147.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0147.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0147.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0147.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0147.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0147.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0147.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0147.940] CloseHandle (hObject=0x1ec) returned 1 [0148.058] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.058] SetEndOfFile (hFile=0x1dc) returned 1 [0148.058] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.vhd")) returned 1 [0148.059] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0148.059] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0148.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0148.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0148.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0148.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0148.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0148.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0148.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0148.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0148.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0148.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0148.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0148.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0148.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0148.535] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0148.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0148.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0148.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0148.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0148.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0148.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0148.536] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0148.536] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0148.536] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0148.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0148.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0148.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0148.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0148.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0149.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0149.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0149.926] CloseHandle (hObject=0x1ec) returned 1 [0150.420] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.421] SetEndOfFile (hFile=0x1dc) returned 1 [0150.421] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.vhd")) returned 1 [0150.422] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0150.422] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0150.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0150.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0150.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2837ff8 [0150.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x2838170 [0150.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0150.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0150.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28382d8 [0150.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836448 [0150.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0150.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28382d8 | out: hHeap=0x2830000) returned 1 [0150.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836448 | out: hHeap=0x2830000) returned 1 [0150.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0150.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0150.441] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0150.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x2838170 [0150.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x28381c0 [0150.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x28383d0 [0150.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381c0 | out: hHeap=0x2830000) returned 1 [0150.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28383d0 | out: hHeap=0x2830000) returned 1 [0150.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0150.442] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838170 [0150.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838170 | out: hHeap=0x2830000) returned 1 [0150.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837ff8 | out: hHeap=0x2830000) returned 1 [0150.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0150.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0150.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0150.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0150.935] CloseHandle (hObject=0x1ec) returned 1 [0151.152] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.152] SetEndOfFile (hFile=0x1dc) returned 1 [0151.152] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.vhd")) returned 1 [0151.154] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0151.154] FindClose (in: hFindFile=0xd24398 | out: hFindFile=0xd24398) returned 1 [0151.154] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0151.156] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.156] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0151.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836548 [0151.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x28) returned 0x2837ff8 [0151.157] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0151.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836568 [0151.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0x2838028 [0151.157] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0151.157] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0151.157] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0151.160] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.161] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0151.161] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ff0 [0151.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ff0 | out: hHeap=0x2830000) returned 1 [0151.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0151.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0151.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.174] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.175] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.175] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.175] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.175] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c8, lpOverlapped=0x0) returned 1 [0151.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12d0, lpOverlapped=0x0) returned 1 [0151.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.188] CloseHandle (hObject=0x1ec) returned 1 [0151.192] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.192] SetEndOfFile (hFile=0x1dc) returned 1 [0151.192] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.vhd" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.vhd")) returned 1 [0151.193] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0151.193] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0151.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0151.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836458 [0151.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836458 | out: hHeap=0x2830000) returned 1 [0151.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.237] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9c, lpOverlapped=0x0) returned 1 [0151.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa0, lpOverlapped=0x0) returned 1 [0151.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.241] CloseHandle (hObject=0x1ec) returned 1 [0151.242] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.242] SetEndOfFile (hFile=0x1dc) returned 1 [0151.242] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.vhd" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.vhd")) returned 1 [0151.243] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0151.243] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.264] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.315] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x241, lpOverlapped=0x0) returned 1 [0151.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffdbf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x250, lpOverlapped=0x0) returned 1 [0151.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.316] CloseHandle (hObject=0x1ec) returned 1 [0151.318] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.318] SetEndOfFile (hFile=0x1dc) returned 1 [0151.319] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.vhd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.vhd")) returned 1 [0151.320] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0151.320] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0151.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0151.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0151.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0151.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.328] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.330] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.330] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.330] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.330] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4a, lpOverlapped=0x0) returned 1 [0151.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x50, lpOverlapped=0x0) returned 1 [0151.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.332] CloseHandle (hObject=0x1ec) returned 1 [0151.334] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.334] SetEndOfFile (hFile=0x1dc) returned 1 [0151.334] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.vhd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.vhd")) returned 1 [0151.335] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0151.335] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0151.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0151.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.346] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x133, lpOverlapped=0x0) returned 1 [0151.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffecd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x140, lpOverlapped=0x0) returned 1 [0151.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.349] CloseHandle (hObject=0x1ec) returned 1 [0151.403] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.403] SetEndOfFile (hFile=0x1dc) returned 1 [0151.403] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.vhd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.vhd")) returned 1 [0151.404] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0151.404] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0151.404] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0151.507] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.507] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0151.507] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.516] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.517] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.519] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0151.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0151.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6b2, lpOverlapped=0x0) returned 1 [0151.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff94e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0151.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.525] CloseHandle (hObject=0x1ec) returned 1 [0151.530] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.530] SetEndOfFile (hFile=0x1dc) returned 1 [0151.531] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.vhd" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.vhd")) returned 1 [0151.531] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0151.532] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0151.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0151.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836468 [0151.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836468 | out: hHeap=0x2830000) returned 1 [0151.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.542] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.543] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1774, lpOverlapped=0x0) returned 1 [0151.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe88c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1780, lpOverlapped=0x0) returned 1 [0151.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.575] CloseHandle (hObject=0x1ec) returned 1 [0151.576] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.576] SetEndOfFile (hFile=0x1dc) returned 1 [0151.577] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.vhd" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.vhd")) returned 1 [0151.577] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0151.578] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.584] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x28, lpOverlapped=0x0) returned 1 [0151.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x30, lpOverlapped=0x0) returned 1 [0151.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.588] CloseHandle (hObject=0x1ec) returned 1 [0151.589] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.589] SetEndOfFile (hFile=0x1dc) returned 1 [0151.590] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.vhd" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.vhd")) returned 1 [0151.591] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0151.591] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0151.591] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0151.625] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.625] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0151.625] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0151.634] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0151.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0151.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0151.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.635] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x47e, lpOverlapped=0x0) returned 1 [0151.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x480, lpOverlapped=0x0) returned 1 [0151.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.638] CloseHandle (hObject=0x1ec) returned 1 [0151.642] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.642] SetEndOfFile (hFile=0x1dc) returned 1 [0151.642] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.vhd")) returned 1 [0151.643] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0151.643] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0151.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0151.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836468 [0151.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836468 | out: hHeap=0x2830000) returned 1 [0151.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.652] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.654] CloseHandle (hObject=0x1ec) returned 1 [0151.658] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.658] SetEndOfFile (hFile=0x1dc) returned 1 [0151.659] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.vhd")) returned 1 [0151.660] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0151.660] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.703] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.703] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.703] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0151.703] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0151.703] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.703] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0151.704] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.704] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.704] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0151.704] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.704] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.704] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.704] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.704] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.704] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.704] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.704] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.705] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.705] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.707] CloseHandle (hObject=0x1ec) returned 1 [0151.711] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.711] SetEndOfFile (hFile=0x1dc) returned 1 [0151.712] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.vhd")) returned 1 [0151.713] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0151.713] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f98 [0151.721] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f98 | out: hHeap=0x2830000) returned 1 [0151.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0151.721] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0151.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.722] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.724] CloseHandle (hObject=0x1ec) returned 1 [0151.726] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.726] SetEndOfFile (hFile=0x1dc) returned 1 [0151.727] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.vhd")) returned 1 [0151.732] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0151.732] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.798] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.798] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.801] CloseHandle (hObject=0x1ec) returned 1 [0151.806] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.807] SetEndOfFile (hFile=0x1dc) returned 1 [0151.807] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.vhd")) returned 1 [0151.808] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0151.808] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0151.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0151.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.816] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.819] CloseHandle (hObject=0x1ec) returned 1 [0151.944] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.944] SetEndOfFile (hFile=0x1dc) returned 1 [0151.944] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.vhd")) returned 1 [0151.945] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0151.945] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0151.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0151.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.954] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.956] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.957] CloseHandle (hObject=0x1ec) returned 1 [0151.958] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.958] SetEndOfFile (hFile=0x1dc) returned 1 [0151.959] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.vhd")) returned 1 [0151.959] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0151.959] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.968] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0151.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0151.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0151.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0151.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0151.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0151.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0151.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0151.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0151.972] CloseHandle (hObject=0x1ec) returned 1 [0151.973] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0151.973] SetEndOfFile (hFile=0x1dc) returned 1 [0151.974] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.vhd")) returned 1 [0151.974] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0151.974] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0151.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0151.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0151.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.114] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x37e, lpOverlapped=0x0) returned 1 [0152.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x380, lpOverlapped=0x0) returned 1 [0152.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.117] CloseHandle (hObject=0x1ec) returned 1 [0152.118] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.118] SetEndOfFile (hFile=0x1dc) returned 1 [0152.119] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.vhd")) returned 1 [0152.120] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0152.120] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0152.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.131] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x47e, lpOverlapped=0x0) returned 1 [0152.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x480, lpOverlapped=0x0) returned 1 [0152.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.134] CloseHandle (hObject=0x1ec) returned 1 [0152.142] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.142] SetEndOfFile (hFile=0x1dc) returned 1 [0152.142] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.vhd")) returned 1 [0152.143] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0152.143] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0152.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836448 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836448 | out: hHeap=0x2830000) returned 1 [0152.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.225] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf66, lpOverlapped=0x0) returned 1 [0152.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff09a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf70, lpOverlapped=0x0) returned 1 [0152.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.233] CloseHandle (hObject=0x1ec) returned 1 [0152.236] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.236] SetEndOfFile (hFile=0x1dc) returned 1 [0152.237] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.vhd")) returned 1 [0152.237] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0152.238] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0152.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0152.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.247] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.248] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.248] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.248] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.248] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x796, lpOverlapped=0x0) returned 1 [0152.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff86a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x7a0, lpOverlapped=0x0) returned 1 [0152.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.251] CloseHandle (hObject=0x1ec) returned 1 [0152.252] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.252] SetEndOfFile (hFile=0x1dc) returned 1 [0152.252] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.vhd")) returned 1 [0152.253] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0152.253] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0152.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.314] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x47e, lpOverlapped=0x0) returned 1 [0152.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x480, lpOverlapped=0x0) returned 1 [0152.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.317] CloseHandle (hObject=0x1ec) returned 1 [0152.318] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.318] SetEndOfFile (hFile=0x1dc) returned 1 [0152.318] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.vhd")) returned 1 [0152.319] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0152.319] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.327] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.327] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.327] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0152.327] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0152.327] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.327] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0152.327] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.327] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.327] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0152.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.328] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x47e, lpOverlapped=0x0) returned 1 [0152.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x480, lpOverlapped=0x0) returned 1 [0152.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.330] CloseHandle (hObject=0x1ec) returned 1 [0152.334] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.334] SetEndOfFile (hFile=0x1dc) returned 1 [0152.334] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.vhd")) returned 1 [0152.335] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0152.335] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0152.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0152.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.343] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.344] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x796, lpOverlapped=0x0) returned 1 [0152.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff86a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x7a0, lpOverlapped=0x0) returned 1 [0152.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.348] CloseHandle (hObject=0x1ec) returned 1 [0152.350] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.350] SetEndOfFile (hFile=0x1dc) returned 1 [0152.350] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.vhd")) returned 1 [0152.351] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0152.351] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0152.351] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0152.396] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.396] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0152.396] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2837048 [0152.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2837048 | out: hHeap=0x2830000) returned 1 [0152.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.413] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.413] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.413] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.413] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.413] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.413] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.413] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.413] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.413] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.413] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.414] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.414] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.414] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.414] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc82, lpOverlapped=0x0) returned 1 [0152.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff37e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc90, lpOverlapped=0x0) returned 1 [0152.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.436] CloseHandle (hObject=0x1ec) returned 1 [0152.440] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.440] SetEndOfFile (hFile=0x1dc) returned 1 [0152.440] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.vhd")) returned 1 [0152.441] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0152.441] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0152.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0152.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.450] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.451] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.452] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x188a, lpOverlapped=0x0) returned 1 [0152.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe776, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1890, lpOverlapped=0x0) returned 1 [0152.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0152.515] CloseHandle (hObject=0x1ec) returned 1 [0152.517] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.517] SetEndOfFile (hFile=0x1dc) returned 1 [0152.517] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.vhd")) returned 1 [0152.518] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0152.518] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0152.518] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0152.518] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.518] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0152.518] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0152.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0152.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0152.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0152.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0152.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0152.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0152.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0152.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0152.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0152.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0152.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.606] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0152.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0152.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0152.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0152.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0152.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0152.607] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.607] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0152.607] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0152.607] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0152.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0152.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0152.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0152.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0152.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1444, lpOverlapped=0x0) returned 1 [0154.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1450, lpOverlapped=0x0) returned 1 [0154.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0154.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0154.370] CloseHandle (hObject=0x1ec) returned 1 [0154.380] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.380] SetEndOfFile (hFile=0x1dc) returned 1 [0154.380] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.vhd")) returned 1 [0154.383] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0154.384] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0154.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0154.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0154.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0154.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0154.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0154.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0154.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0154.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0154.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0154.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.490] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0154.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0154.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0154.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0154.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0154.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0154.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0154.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0154.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0154.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0154.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1882, lpOverlapped=0x0) returned 1 [0154.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe77e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1890, lpOverlapped=0x0) returned 1 [0154.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0154.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0154.551] CloseHandle (hObject=0x1ec) returned 1 [0154.554] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.554] SetEndOfFile (hFile=0x1dc) returned 1 [0154.554] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.vhd")) returned 1 [0154.556] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0154.556] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0154.557] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0154.558] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.558] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0154.558] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0154.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0154.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0154.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0154.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0154.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0154.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0154.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0154.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0154.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0154.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0154.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.658] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0154.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0154.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0154.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0154.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0154.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0154.660] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.660] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0154.660] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0154.660] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0154.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbfd, lpOverlapped=0x0) returned 1 [0154.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff403, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0154.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc00, lpOverlapped=0x0) returned 1 [0154.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0154.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0154.661] CloseHandle (hObject=0x1ec) returned 1 [0154.666] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0154.666] SetEndOfFile (hFile=0x1dc) returned 1 [0154.667] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.vhd")) returned 1 [0155.621] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0155.621] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0155.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0155.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0156.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0156.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0156.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0156.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.346] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.347] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x187c, lpOverlapped=0x0) returned 1 [0156.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe784, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1880, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1880, lpOverlapped=0x0) returned 1 [0156.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.404] CloseHandle (hObject=0x1ec) returned 1 [0156.411] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.411] SetEndOfFile (hFile=0x1dc) returned 1 [0156.411] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.vhd")) returned 1 [0156.412] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0156.412] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0156.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0156.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.438] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.439] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.439] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.439] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.440] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x958, lpOverlapped=0x0) returned 1 [0156.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x960, lpOverlapped=0x0) returned 1 [0156.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.481] CloseHandle (hObject=0x1ec) returned 1 [0156.487] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.487] SetEndOfFile (hFile=0x1dc) returned 1 [0156.506] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.vhd")) returned 1 [0156.507] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0156.507] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0156.507] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0156.508] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.508] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0156.508] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.523] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.524] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18a5, lpOverlapped=0x0) returned 1 [0156.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe75b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18b0, lpOverlapped=0x0) returned 1 [0156.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.534] CloseHandle (hObject=0x1ec) returned 1 [0156.540] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.540] SetEndOfFile (hFile=0x1dc) returned 1 [0156.540] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.vhd")) returned 1 [0156.546] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0156.546] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0156.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0156.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0156.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0156.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.554] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.554] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.554] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.554] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd90, lpOverlapped=0x0) returned 1 [0156.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd90, lpOverlapped=0x0) returned 1 [0156.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.583] CloseHandle (hObject=0x1ec) returned 1 [0156.585] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.585] SetEndOfFile (hFile=0x1dc) returned 1 [0156.585] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.vhd")) returned 1 [0156.586] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0156.586] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0156.613] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0156.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836458 [0156.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836458 | out: hHeap=0x2830000) returned 1 [0156.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.614] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1758, lpOverlapped=0x0) returned 1 [0156.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1760, lpOverlapped=0x0) returned 1 [0156.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.627] CloseHandle (hObject=0x1ec) returned 1 [0156.676] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.676] SetEndOfFile (hFile=0x1dc) returned 1 [0156.676] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.vhd")) returned 1 [0156.677] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0156.677] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0156.677] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0156.678] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.679] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0156.679] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0156.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0156.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.690] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.738] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.738] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.739] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.739] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.739] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.739] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfaf, lpOverlapped=0x0) returned 1 [0156.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff051, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfb0, lpOverlapped=0x0) returned 1 [0156.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.740] CloseHandle (hObject=0x1ec) returned 1 [0156.742] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.742] SetEndOfFile (hFile=0x1dc) returned 1 [0156.742] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.vhd")) returned 1 [0156.750] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0156.750] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0156.768] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0156.768] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.768] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0156.768] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.768] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.768] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0156.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0156.771] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0156.771] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0156.771] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0156.771] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0156.772] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.772] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0156.772] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0156.772] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0156.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0156.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0156.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x197e, lpOverlapped=0x0) returned 1 [0156.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe682, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1980, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1980, lpOverlapped=0x0) returned 1 [0156.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0156.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0156.821] CloseHandle (hObject=0x1ec) returned 1 [0156.826] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0156.826] SetEndOfFile (hFile=0x1dc) returned 1 [0156.826] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.vhd")) returned 1 [0156.827] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0156.827] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0156.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0156.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0157.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0157.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0157.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0157.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0157.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.096] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0157.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0157.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0157.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0157.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0157.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0157.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0157.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0157.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0157.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0157.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0157.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0157.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0157.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x958, lpOverlapped=0x0) returned 1 [0157.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0157.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x960, lpOverlapped=0x0) returned 1 [0157.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0157.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0157.174] CloseHandle (hObject=0x1ec) returned 1 [0157.177] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.177] SetEndOfFile (hFile=0x1dc) returned 1 [0157.177] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.vhd")) returned 1 [0157.178] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0157.178] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0157.178] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0157.179] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.179] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0157.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0157.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0157.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0157.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0157.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0157.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0157.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0157.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0157.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0157.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0157.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0157.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0157.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0157.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.819] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0157.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0157.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0157.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0157.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0157.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0157.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0157.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0157.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0157.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16c3, lpOverlapped=0x0) returned 1 [0157.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe93d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0157.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16d0, lpOverlapped=0x0) returned 1 [0157.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0157.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0157.893] CloseHandle (hObject=0x1ec) returned 1 [0157.896] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0157.896] SetEndOfFile (hFile=0x1dc) returned 1 [0157.896] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.vhd")) returned 1 [0157.967] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0157.967] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0157.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0157.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0158.046] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.048] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0158.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0158.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0158.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0158.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0158.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0158.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0158.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0158.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0158.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0158.052] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0158.052] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0158.053] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0158.053] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0158.053] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0158.053] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0158.053] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0158.053] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0158.055] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0158.055] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0158.055] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0158.055] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0158.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0158.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0158.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd0c, lpOverlapped=0x0) returned 1 [0158.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd10, lpOverlapped=0x0) returned 1 [0158.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0158.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0158.798] CloseHandle (hObject=0x1ec) returned 1 [0158.800] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0158.800] SetEndOfFile (hFile=0x1dc) returned 1 [0158.800] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.vhd")) returned 1 [0158.801] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0158.801] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0158.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0158.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0159.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0159.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0159.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0159.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0159.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.477] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0159.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0159.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0159.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0159.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.478] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0159.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0159.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0159.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0159.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0159.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1758, lpOverlapped=0x0) returned 1 [0159.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0159.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1760, lpOverlapped=0x0) returned 1 [0159.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0159.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0159.592] CloseHandle (hObject=0x1ec) returned 1 [0159.594] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.594] SetEndOfFile (hFile=0x1dc) returned 1 [0159.594] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.vhd")) returned 1 [0159.595] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0159.595] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0159.595] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0159.596] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.596] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0159.596] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0159.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0159.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0159.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0159.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0159.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0159.604] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0159.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0159.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0159.604] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.604] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0159.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0159.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0159.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.605] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0159.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0159.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0159.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0159.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0159.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0159.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0159.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0159.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0159.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf13, lpOverlapped=0x0) returned 1 [0159.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0159.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf20, lpOverlapped=0x0) returned 1 [0159.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0159.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0159.607] CloseHandle (hObject=0x1ec) returned 1 [0159.610] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0159.610] SetEndOfFile (hFile=0x1dc) returned 1 [0159.610] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.vhd")) returned 1 [0159.756] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0159.756] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0160.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0160.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0160.840] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0160.840] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0160.840] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0160.840] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0160.840] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0160.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0160.841] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0160.841] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0160.841] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0160.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0160.841] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0160.841] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0160.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0160.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0160.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0160.841] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0160.841] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0160.842] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0160.842] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0160.842] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0160.842] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0160.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0160.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0161.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0161.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0161.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0167.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0167.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0167.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc12, lpOverlapped=0x0) returned 1 [0169.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff3ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc20, lpOverlapped=0x0) returned 1 [0169.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0169.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0169.832] CloseHandle (hObject=0x1ec) returned 1 [0169.838] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.839] SetEndOfFile (hFile=0x1dc) returned 1 [0169.839] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.vhd")) returned 1 [0169.842] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0169.842] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0169.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0169.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0169.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0169.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0169.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0169.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.895] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0169.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0169.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0169.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0169.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0169.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0169.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0169.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0169.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0169.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x558, lpOverlapped=0x0) returned 1 [0169.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffaa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x560, lpOverlapped=0x0) returned 1 [0169.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0169.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0169.900] CloseHandle (hObject=0x1ec) returned 1 [0169.902] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.902] SetEndOfFile (hFile=0x1dc) returned 1 [0169.902] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.vhd")) returned 1 [0169.903] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0169.903] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0169.903] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24158 [0169.903] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.904] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0169.904] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0169.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0169.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836458 [0169.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0169.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836458 | out: hHeap=0x2830000) returned 1 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0169.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.963] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0169.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0169.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0169.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0169.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0169.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0169.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0169.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf19, lpOverlapped=0x0) returned 1 [0169.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf20, lpOverlapped=0x0) returned 1 [0169.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0169.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0169.966] CloseHandle (hObject=0x1ec) returned 1 [0169.967] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.968] SetEndOfFile (hFile=0x1dc) returned 1 [0170.114] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.vhd")) returned 1 [0170.184] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0170.184] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0170.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0170.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0170.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0170.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0170.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.197] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0170.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0170.198] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0170.198] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0170.198] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0170.198] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0170.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0170.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0170.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf70, lpOverlapped=0x0) returned 1 [0170.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff090, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf70, lpOverlapped=0x0) returned 1 [0170.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0170.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0170.237] CloseHandle (hObject=0x1ec) returned 1 [0170.240] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.240] SetEndOfFile (hFile=0x1dc) returned 1 [0170.240] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.vhd")) returned 1 [0170.241] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0170.241] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0170.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.250] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0170.250] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0170.250] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0170.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0170.250] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0170.250] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0170.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0170.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0170.250] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0170.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.250] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0170.251] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0170.251] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0170.251] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0170.251] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0170.251] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0170.252] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.252] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0170.252] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.252] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0170.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0170.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0170.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x558, lpOverlapped=0x0) returned 1 [0170.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffaa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x560, lpOverlapped=0x0) returned 1 [0170.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0170.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0170.260] CloseHandle (hObject=0x1ec) returned 1 [0170.261] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.261] SetEndOfFile (hFile=0x1dc) returned 1 [0170.261] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.vhd")) returned 1 [0170.262] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0170.262] FindClose (in: hFindFile=0xd24158 | out: hFindFile=0xd24158) returned 1 [0170.262] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0170.267] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.267] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0170.267] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0170.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0170.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0170.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0170.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0170.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0170.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0170.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0170.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0170.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0170.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0170.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.277] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0170.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0170.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0170.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0170.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0170.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0170.278] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.278] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0170.278] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0170.278] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0170.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14b8, lpOverlapped=0x0) returned 1 [0171.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14c0, lpOverlapped=0x0) returned 1 [0171.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0171.591] CloseHandle (hObject=0x1ec) returned 1 [0171.593] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.593] SetEndOfFile (hFile=0x1dc) returned 1 [0171.594] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.vhd")) returned 1 [0171.608] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0171.608] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0171.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0171.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0171.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0171.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0171.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0171.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0171.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0171.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0171.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.624] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0171.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0171.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0171.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0171.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0171.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0171.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0171.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0171.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e4a, lpOverlapped=0x0) returned 1 [0171.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe1b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e50, lpOverlapped=0x0) returned 1 [0171.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0171.759] CloseHandle (hObject=0x1ec) returned 1 [0171.762] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.762] SetEndOfFile (hFile=0x1dc) returned 1 [0171.762] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.vhd")) returned 1 [0171.763] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0171.763] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0171.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0171.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0171.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0171.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0171.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0171.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836448 [0171.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0171.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836448 | out: hHeap=0x2830000) returned 1 [0171.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0171.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.785] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0171.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0171.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0171.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0171.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0171.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0171.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0171.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0171.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0171.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0171.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0171.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0171.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0171.794] CloseHandle (hObject=0x1ec) returned 1 [0171.798] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.798] SetEndOfFile (hFile=0x1dc) returned 1 [0171.798] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.vhd")) returned 1 [0171.799] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0171.799] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0171.799] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0171.800] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.800] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0171.800] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0171.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f98 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f98 | out: hHeap=0x2830000) returned 1 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.807] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0171.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0171.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0171.808] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.808] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0171.808] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0171.808] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0171.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe63, lpOverlapped=0x0) returned 1 [0171.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff19d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe70, lpOverlapped=0x0) returned 1 [0171.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0171.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0171.867] CloseHandle (hObject=0x1ec) returned 1 [0171.868] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.868] SetEndOfFile (hFile=0x1dc) returned 1 [0171.961] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.vhd")) returned 1 [0171.972] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0171.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0171.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0172.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0172.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.008] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.010] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1b62, lpOverlapped=0x0) returned 1 [0172.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe49e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1b70, lpOverlapped=0x0) returned 1 [0172.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.056] CloseHandle (hObject=0x1ec) returned 1 [0172.063] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.063] SetEndOfFile (hFile=0x1dc) returned 1 [0172.063] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.vhd")) returned 1 [0172.064] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0172.064] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0172.080] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0172.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0172.080] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.080] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.080] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0172.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.080] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.081] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.082] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0172.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0172.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.115] CloseHandle (hObject=0x1ec) returned 1 [0172.116] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.116] SetEndOfFile (hFile=0x1dc) returned 1 [0172.117] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.vhd")) returned 1 [0172.118] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0172.118] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0172.118] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0172.118] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.118] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0172.118] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0172.125] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0172.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.126] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.126] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfc8, lpOverlapped=0x0) returned 1 [0172.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff038, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfd0, lpOverlapped=0x0) returned 1 [0172.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.128] CloseHandle (hObject=0x1ec) returned 1 [0172.129] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.129] SetEndOfFile (hFile=0x1dc) returned 1 [0172.129] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.vhd")) returned 1 [0172.132] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0172.132] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.142] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.143] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c6, lpOverlapped=0x0) returned 1 [0172.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe3a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d0, lpOverlapped=0x0) returned 1 [0172.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.244] CloseHandle (hObject=0x1ec) returned 1 [0172.248] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.248] SetEndOfFile (hFile=0x1dc) returned 1 [0172.378] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.vhd")) returned 1 [0172.379] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0172.379] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.424] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0172.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0172.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.444] CloseHandle (hObject=0x1ec) returned 1 [0172.446] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.446] SetEndOfFile (hFile=0x1dc) returned 1 [0172.446] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.vhd")) returned 1 [0172.447] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0172.447] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0172.448] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0172.453] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.453] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0172.453] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0172.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.466] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.466] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.466] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.468] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.468] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbe6, lpOverlapped=0x0) returned 1 [0172.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff41a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xbf0, lpOverlapped=0x0) returned 1 [0172.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.469] CloseHandle (hObject=0x1ec) returned 1 [0172.470] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.470] SetEndOfFile (hFile=0x1dc) returned 1 [0172.470] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.vhd")) returned 1 [0172.474] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0172.474] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0172.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0172.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.577] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x15c0, lpOverlapped=0x0) returned 1 [0172.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffea40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x15c0, lpOverlapped=0x0) returned 1 [0172.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.586] CloseHandle (hObject=0x1ec) returned 1 [0172.593] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.594] SetEndOfFile (hFile=0x1dc) returned 1 [0172.609] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.vhd")) returned 1 [0172.610] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0172.610] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0172.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0172.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.633] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.634] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.634] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.634] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x558, lpOverlapped=0x0) returned 1 [0172.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffaa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x560, lpOverlapped=0x0) returned 1 [0172.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.750] CloseHandle (hObject=0x1ec) returned 1 [0172.752] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.752] SetEndOfFile (hFile=0x1dc) returned 1 [0172.752] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.vhd")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0172.753] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0172.753] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0172.755] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0172.755] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.764] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.766] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.766] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.766] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdda, lpOverlapped=0x0) returned 1 [0172.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff226, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xde0, lpOverlapped=0x0) returned 1 [0172.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.767] CloseHandle (hObject=0x1ec) returned 1 [0172.770] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.770] SetEndOfFile (hFile=0x1dc) returned 1 [0172.771] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.vhd")) returned 1 [0172.774] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0172.774] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0172.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0172.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.791] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.791] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.791] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.791] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.791] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1712, lpOverlapped=0x0) returned 1 [0172.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1720, lpOverlapped=0x0) returned 1 [0172.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.850] CloseHandle (hObject=0x1ec) returned 1 [0172.856] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.856] SetEndOfFile (hFile=0x1dc) returned 1 [0172.857] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.vhd")) returned 1 [0172.858] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0172.858] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f98 [0172.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f98 | out: hHeap=0x2830000) returned 1 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0172.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0172.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.868] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0172.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0172.869] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0172.869] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0172.870] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.870] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0172.870] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0172.870] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0172.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0172.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0172.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb58, lpOverlapped=0x0) returned 1 [0172.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb60, lpOverlapped=0x0) returned 1 [0172.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0172.876] CloseHandle (hObject=0x1ec) returned 1 [0172.878] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.878] SetEndOfFile (hFile=0x1dc) returned 1 [0172.879] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.vhd")) returned 1 [0172.879] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0172.879] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0172.879] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0172.881] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.881] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0172.881] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0172.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0172.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0172.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0173.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0173.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0173.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0173.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.001] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.003] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x118f, lpOverlapped=0x0) returned 1 [0173.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee71, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1190, lpOverlapped=0x0) returned 1 [0173.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.006] CloseHandle (hObject=0x1ec) returned 1 [0173.010] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.010] SetEndOfFile (hFile=0x1dc) returned 1 [0173.011] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.vhd")) returned 1 [0173.031] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0173.031] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0173.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0173.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0173.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0173.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.040] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ed6, lpOverlapped=0x0) returned 1 [0173.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe12a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ee0, lpOverlapped=0x0) returned 1 [0173.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.049] CloseHandle (hObject=0x1ec) returned 1 [0173.054] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.054] SetEndOfFile (hFile=0x1dc) returned 1 [0173.054] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.vhd")) returned 1 [0173.055] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0173.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0173.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0173.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.150] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1b58, lpOverlapped=0x0) returned 1 [0173.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe4a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1b60, lpOverlapped=0x0) returned 1 [0173.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.221] CloseHandle (hObject=0x1ec) returned 1 [0173.226] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.226] SetEndOfFile (hFile=0x1dc) returned 1 [0173.226] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.vhd")) returned 1 [0173.227] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0173.227] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0173.227] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0173.228] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.228] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0173.228] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0173.249] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0173.249] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.249] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.249] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.249] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.249] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.249] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.250] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.251] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.251] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.251] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.251] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x78d, lpOverlapped=0x0) returned 1 [0173.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff873, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x790, lpOverlapped=0x0) returned 1 [0173.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.254] CloseHandle (hObject=0x1ec) returned 1 [0173.259] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.259] SetEndOfFile (hFile=0x1dc) returned 1 [0173.259] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.vhd")) returned 1 [0173.263] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0173.263] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0173.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0173.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.272] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa82, lpOverlapped=0x0) returned 1 [0173.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff57e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa90, lpOverlapped=0x0) returned 1 [0173.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.368] CloseHandle (hObject=0x1ec) returned 1 [0173.375] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.375] SetEndOfFile (hFile=0x1dc) returned 1 [0173.375] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.vhd")) returned 1 [0173.376] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0173.376] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0173.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0173.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.423] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1d58, lpOverlapped=0x0) returned 1 [0173.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe2a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d60, lpOverlapped=0x0) returned 1 [0173.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.436] CloseHandle (hObject=0x1ec) returned 1 [0173.438] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.438] SetEndOfFile (hFile=0x1dc) returned 1 [0173.438] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.vhd")) returned 1 [0173.439] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0173.439] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0173.439] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0173.439] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.439] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0173.439] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.488] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.488] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.488] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0173.488] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0173.488] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.488] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0173.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0173.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.489] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe3b, lpOverlapped=0x0) returned 1 [0173.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe40, lpOverlapped=0x0) returned 1 [0173.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.491] CloseHandle (hObject=0x1ec) returned 1 [0173.492] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.492] SetEndOfFile (hFile=0x1dc) returned 1 [0173.492] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.vhd")) returned 1 [0173.495] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0173.495] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0173.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0173.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.504] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18bc, lpOverlapped=0x0) returned 1 [0173.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe744, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18c0, lpOverlapped=0x0) returned 1 [0173.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.586] CloseHandle (hObject=0x1ec) returned 1 [0173.595] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.595] SetEndOfFile (hFile=0x1dc) returned 1 [0173.595] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.vhd")) returned 1 [0173.597] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0173.597] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0173.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0173.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.606] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.606] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.607] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.607] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.607] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0173.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0173.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.612] CloseHandle (hObject=0x1ec) returned 1 [0173.614] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.614] SetEndOfFile (hFile=0x1dc) returned 1 [0173.614] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.vhd")) returned 1 [0173.615] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0173.615] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0173.615] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0173.752] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.752] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0173.752] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.763] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.765] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.765] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x109e, lpOverlapped=0x0) returned 1 [0173.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10a0, lpOverlapped=0x0) returned 1 [0173.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.767] CloseHandle (hObject=0x1ec) returned 1 [0173.770] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.770] SetEndOfFile (hFile=0x1dc) returned 1 [0173.770] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.vhd")) returned 1 [0173.774] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0173.774] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x11aa, lpOverlapped=0x0) returned 1 [0173.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x11b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x11b0, lpOverlapped=0x0) returned 1 [0173.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.793] CloseHandle (hObject=0x1ec) returned 1 [0173.878] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.878] SetEndOfFile (hFile=0x1dc) returned 1 [0173.976] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.vhd")) returned 1 [0173.977] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0173.977] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0173.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0173.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0173.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0173.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.986] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0173.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0173.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0173.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0173.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0173.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0173.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0173.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0173.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0173.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0173.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0173.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x958, lpOverlapped=0x0) returned 1 [0173.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x960, lpOverlapped=0x0) returned 1 [0173.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0173.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0173.996] CloseHandle (hObject=0x1ec) returned 1 [0173.998] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.998] SetEndOfFile (hFile=0x1dc) returned 1 [0173.999] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.vhd")) returned 1 [0174.000] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0174.000] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0174.000] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0174.000] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.000] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0174.000] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836438 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836438 | out: hHeap=0x2830000) returned 1 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.008] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.010] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.010] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ac3, lpOverlapped=0x0) returned 1 [0174.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe53d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ad0, lpOverlapped=0x0) returned 1 [0174.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.061] CloseHandle (hObject=0x1ec) returned 1 [0174.066] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.066] SetEndOfFile (hFile=0x1dc) returned 1 [0174.153] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.vhd")) returned 1 [0174.156] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0174.156] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0174.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836418 [0174.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836418 | out: hHeap=0x2830000) returned 1 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.165] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.166] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.166] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x198c, lpOverlapped=0x0) returned 1 [0174.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe674, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1990, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1990, lpOverlapped=0x0) returned 1 [0174.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.174] CloseHandle (hObject=0x1ec) returned 1 [0174.178] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.178] SetEndOfFile (hFile=0x1dc) returned 1 [0174.178] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.vhd")) returned 1 [0174.179] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0174.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0174.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836468 [0174.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836468 | out: hHeap=0x2830000) returned 1 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.237] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x158, lpOverlapped=0x0) returned 1 [0174.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x160, lpOverlapped=0x0) returned 1 [0174.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.250] CloseHandle (hObject=0x1ec) returned 1 [0174.252] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.252] SetEndOfFile (hFile=0x1dc) returned 1 [0174.252] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.vhd")) returned 1 [0174.253] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0174.253] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0174.253] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0174.254] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.255] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0174.255] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0174.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0174.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836458 [0174.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836458 | out: hHeap=0x2830000) returned 1 [0174.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.264] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.265] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdc6, lpOverlapped=0x0) returned 1 [0174.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff23a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xdd0, lpOverlapped=0x0) returned 1 [0174.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.266] CloseHandle (hObject=0x1ec) returned 1 [0174.270] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.270] SetEndOfFile (hFile=0x1dc) returned 1 [0174.271] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.vhd")) returned 1 [0174.274] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0174.274] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0174.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0174.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0174.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0174.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.324] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.326] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x412, lpOverlapped=0x0) returned 1 [0174.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x420, lpOverlapped=0x0) returned 1 [0174.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.333] CloseHandle (hObject=0x1ec) returned 1 [0174.338] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.338] SetEndOfFile (hFile=0x1dc) returned 1 [0174.339] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.vhd")) returned 1 [0174.339] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0174.340] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0174.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0174.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0174.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0174.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.349] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x958, lpOverlapped=0x0) returned 1 [0174.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x960, lpOverlapped=0x0) returned 1 [0174.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.353] CloseHandle (hObject=0x1ec) returned 1 [0174.429] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.429] SetEndOfFile (hFile=0x1dc) returned 1 [0174.531] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.vhd")) returned 1 [0174.532] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0174.532] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0174.532] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0174.533] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.534] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0174.534] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.546] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.550] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe76, lpOverlapped=0x0) returned 1 [0174.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff18a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe80, lpOverlapped=0x0) returned 1 [0174.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0174.551] CloseHandle (hObject=0x1ec) returned 1 [0174.556] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.556] SetEndOfFile (hFile=0x1dc) returned 1 [0174.556] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.vhd")) returned 1 [0174.573] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0174.573] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0174.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0174.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0174.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0174.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0174.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0174.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0174.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0174.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0174.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0174.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0174.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.600] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0174.600] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0174.600] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0174.600] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0174.600] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0174.600] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0174.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0174.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0174.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0174.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0174.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0174.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcde, lpOverlapped=0x0) returned 1 [0175.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff322, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xce0, lpOverlapped=0x0) returned 1 [0175.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0175.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0175.314] CloseHandle (hObject=0x1ec) returned 1 [0175.320] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.320] SetEndOfFile (hFile=0x1dc) returned 1 [0175.320] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.vhd")) returned 1 [0175.321] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0175.321] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0175.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0175.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.753] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0175.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0175.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0175.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0175.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0175.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0175.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0175.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0175.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0175.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0175.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0175.778] CloseHandle (hObject=0x1ec) returned 1 [0175.787] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.787] SetEndOfFile (hFile=0x1dc) returned 1 [0175.787] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.vhd")) returned 1 [0175.788] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0175.788] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0175.788] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0175.789] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.789] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0175.789] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0175.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0175.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0175.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.814] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0175.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0175.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0175.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0175.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0175.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0175.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc74, lpOverlapped=0x0) returned 1 [0175.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff38c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc80, lpOverlapped=0x0) returned 1 [0175.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0175.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0175.817] CloseHandle (hObject=0x1ec) returned 1 [0175.990] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.990] SetEndOfFile (hFile=0x1dc) returned 1 [0176.157] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.vhd")) returned 1 [0176.160] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0176.160] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0176.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0176.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0176.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0176.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0176.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0176.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0176.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.170] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0176.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0176.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0176.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0176.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0176.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0176.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0176.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdb0, lpOverlapped=0x0) returned 1 [0176.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff250, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xdb0, lpOverlapped=0x0) returned 1 [0176.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0176.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0176.180] CloseHandle (hObject=0x1ec) returned 1 [0176.186] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.186] SetEndOfFile (hFile=0x1dc) returned 1 [0176.187] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.vhd")) returned 1 [0176.488] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0176.488] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0176.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.505] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0176.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0176.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0176.507] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.507] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0176.507] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.507] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0176.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x358, lpOverlapped=0x0) returned 1 [0176.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffca8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x360, lpOverlapped=0x0) returned 1 [0176.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0176.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0176.511] CloseHandle (hObject=0x1ec) returned 1 [0176.518] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.518] SetEndOfFile (hFile=0x1dc) returned 1 [0176.518] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.vhd")) returned 1 [0176.519] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0176.519] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0176.520] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0176.520] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.520] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0176.520] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0176.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0176.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0176.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0176.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0176.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0176.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0176.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0176.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0176.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0176.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0176.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0176.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.685] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0176.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0176.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0176.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0176.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0176.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0176.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.687] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0176.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0176.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0176.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0176.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0176.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2ac, lpOverlapped=0x0) returned 1 [0176.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2b0, lpOverlapped=0x0) returned 1 [0176.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0176.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0176.693] CloseHandle (hObject=0x1ec) returned 1 [0176.695] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.695] SetEndOfFile (hFile=0x1dc) returned 1 [0176.695] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.vhd")) returned 1 [0177.212] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0177.213] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0177.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0177.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.222] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.223] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.223] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x110c, lpOverlapped=0x0) returned 1 [0177.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeef4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1110, lpOverlapped=0x0) returned 1 [0177.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.232] CloseHandle (hObject=0x1ec) returned 1 [0177.239] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.239] SetEndOfFile (hFile=0x1dc) returned 1 [0177.239] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.vhd")) returned 1 [0177.240] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0177.240] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0177.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0177.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.311] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb58, lpOverlapped=0x0) returned 1 [0177.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb60, lpOverlapped=0x0) returned 1 [0177.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.347] CloseHandle (hObject=0x1ec) returned 1 [0177.349] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.349] SetEndOfFile (hFile=0x1dc) returned 1 [0177.349] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.vhd")) returned 1 [0177.350] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0177.350] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0177.350] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24718 [0177.351] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.352] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0177.352] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.365] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.366] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd5b, lpOverlapped=0x0) returned 1 [0177.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd60, lpOverlapped=0x0) returned 1 [0177.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.367] CloseHandle (hObject=0x1ec) returned 1 [0177.370] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.370] SetEndOfFile (hFile=0x1dc) returned 1 [0177.390] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.vhd")) returned 1 [0177.392] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0177.392] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0177.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836458 [0177.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836458 | out: hHeap=0x2830000) returned 1 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.399] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1aa, lpOverlapped=0x0) returned 1 [0177.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1b0, lpOverlapped=0x0) returned 1 [0177.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.409] CloseHandle (hObject=0x1ec) returned 1 [0177.418] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.418] SetEndOfFile (hFile=0x1dc) returned 1 [0177.419] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.vhd")) returned 1 [0177.420] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0177.420] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0177.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0177.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836458 [0177.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836458 | out: hHeap=0x2830000) returned 1 [0177.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.498] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.500] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.500] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.500] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.500] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x958, lpOverlapped=0x0) returned 1 [0177.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x960, lpOverlapped=0x0) returned 1 [0177.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.508] CloseHandle (hObject=0x1ec) returned 1 [0177.509] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.509] SetEndOfFile (hFile=0x1dc) returned 1 [0177.510] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.vhd")) returned 1 [0177.510] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0177.510] FindClose (in: hFindFile=0xd24718 | out: hFindFile=0xd24718) returned 1 [0177.511] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24198 [0177.511] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.511] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0177.511] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28369c0 [0177.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28369c0 | out: hHeap=0x2830000) returned 1 [0177.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0177.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0177.524] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.524] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.524] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.524] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.524] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.524] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.525] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.525] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.525] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.525] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcf2, lpOverlapped=0x0) returned 1 [0177.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff30e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd00, lpOverlapped=0x0) returned 1 [0177.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.526] CloseHandle (hObject=0x1ec) returned 1 [0177.531] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.531] SetEndOfFile (hFile=0x1dc) returned 1 [0177.531] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.vhd")) returned 1 [0177.544] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0177.544] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0177.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0177.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.554] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.554] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.554] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.554] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.555] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.555] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfb4, lpOverlapped=0x0) returned 1 [0177.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff04c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfc0, lpOverlapped=0x0) returned 1 [0177.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.572] CloseHandle (hObject=0x1ec) returned 1 [0177.577] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.577] SetEndOfFile (hFile=0x1dc) returned 1 [0177.577] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.vhd")) returned 1 [0177.579] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0177.579] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.589] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.589] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0177.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0177.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.614] CloseHandle (hObject=0x1ec) returned 1 [0177.618] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.619] SetEndOfFile (hFile=0x1dc) returned 1 [0177.619] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.vhd")) returned 1 [0177.620] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0177.620] FindClose (in: hFindFile=0xd24198 | out: hFindFile=0xd24198) returned 1 [0177.620] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0177.620] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.621] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0177.621] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0177.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0177.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x28365b8 [0177.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28365b8 | out: hHeap=0x2830000) returned 1 [0177.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe8e, lpOverlapped=0x0) returned 1 [0177.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff172, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe90, lpOverlapped=0x0) returned 1 [0177.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.633] CloseHandle (hObject=0x1ec) returned 1 [0177.635] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.635] SetEndOfFile (hFile=0x1dc) returned 1 [0177.635] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.vhd")) returned 1 [0177.639] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0177.639] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0177.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0177.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.652] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c4a, lpOverlapped=0x0) returned 1 [0177.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe3b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1c50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1c50, lpOverlapped=0x0) returned 1 [0177.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.679] CloseHandle (hObject=0x1ec) returned 1 [0177.685] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.685] SetEndOfFile (hFile=0x1dc) returned 1 [0177.685] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.vhd")) returned 1 [0177.686] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0177.686] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0177.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.695] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.696] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.696] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.696] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.696] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0177.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0177.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.702] CloseHandle (hObject=0x1ec) returned 1 [0177.709] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.709] SetEndOfFile (hFile=0x1dc) returned 1 [0177.709] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.vhd")) returned 1 [0177.710] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0177.710] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0177.710] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24458 [0177.710] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.711] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0177.711] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0177.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0177.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.728] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.729] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.730] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.730] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.730] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18a5, lpOverlapped=0x0) returned 1 [0177.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe75b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18b0, lpOverlapped=0x0) returned 1 [0177.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.731] CloseHandle (hObject=0x1ec) returned 1 [0177.735] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.735] SetEndOfFile (hFile=0x1dc) returned 1 [0177.735] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.vhd")) returned 1 [0177.738] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0177.738] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f98 [0177.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f98 | out: hHeap=0x2830000) returned 1 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.746] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.748] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd90, lpOverlapped=0x0) returned 1 [0177.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd90, lpOverlapped=0x0) returned 1 [0177.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.755] CloseHandle (hObject=0x1ec) returned 1 [0177.758] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.758] SetEndOfFile (hFile=0x1dc) returned 1 [0177.759] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.vhd")) returned 1 [0177.759] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0177.759] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836c28 [0177.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836c28 | out: hHeap=0x2830000) returned 1 [0177.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.785] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1758, lpOverlapped=0x0) returned 1 [0177.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1760, lpOverlapped=0x0) returned 1 [0177.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.798] CloseHandle (hObject=0x1ec) returned 1 [0177.802] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.802] SetEndOfFile (hFile=0x1dc) returned 1 [0177.802] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.vhd")) returned 1 [0177.803] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0177.803] FindClose (in: hFindFile=0xd24458 | out: hFindFile=0xd24458) returned 1 [0177.803] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0177.806] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.806] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0177.806] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.817] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1d8f, lpOverlapped=0x0) returned 1 [0177.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe271, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d90, lpOverlapped=0x0) returned 1 [0177.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.821] CloseHandle (hObject=0x1ec) returned 1 [0177.893] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.893] SetEndOfFile (hFile=0x1dc) returned 1 [0177.920] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.vhd")) returned 1 [0177.926] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0177.926] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0177.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0177.934] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0177.934] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0177.934] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0177.934] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0177.934] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0177.934] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836578 [0177.935] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.935] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0177.935] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836578 | out: hHeap=0x2830000) returned 1 [0177.935] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.935] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.935] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0177.935] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0177.935] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0177.935] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0177.935] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0177.935] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0177.936] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.936] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0177.936] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0177.936] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0177.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0177.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0177.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e6, lpOverlapped=0x0) returned 1 [0177.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f0, lpOverlapped=0x0) returned 1 [0177.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0177.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0177.961] CloseHandle (hObject=0x1ec) returned 1 [0178.053] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.053] SetEndOfFile (hFile=0x1dc) returned 1 [0178.075] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.vhd")) returned 1 [0178.076] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0178.076] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0x2838060 [0178.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0x28381d8 [0178.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0178.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x2838340 [0178.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0x2836408 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838340 | out: hHeap=0x2830000) returned 1 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836408 | out: hHeap=0x2830000) returned 1 [0178.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0178.086] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0x28381d8 [0178.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0x2838228 [0178.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0x2838438 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838228 | out: hHeap=0x2830000) returned 1 [0178.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838438 | out: hHeap=0x2830000) returned 1 [0178.087] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0178.087] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0x28381d8 [0178.087] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28381d8 | out: hHeap=0x2830000) returned 1 [0178.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2838060 | out: hHeap=0x2830000) returned 1 [0178.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x358, lpOverlapped=0x0) returned 1 [0178.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffca8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x360, lpOverlapped=0x0) returned 1 [0178.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.091] CloseHandle (hObject=0x1ec) returned 1 [0178.102] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.102] SetEndOfFile (hFile=0x1dc) returned 1 [0178.102] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.vhd")) returned 1 [0178.103] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0178.103] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0178.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0178.104] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.104] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0178.104] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0178.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836578 [0178.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0x2838060 [0178.104] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0 [0178.104] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0178.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0178.105] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.165] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm", cAlternateFileName="9E2F88~1.0_X")) returned 1 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28365b8 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x92) returned 0x28380c0 [0178.165] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deleted", cAlternateFileName="")) returned 1 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836408 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0x2836c28 [0178.165] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836418 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x2838160 [0178.165] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836468 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa2) returned 0x2838218 [0178.165] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836438 [0178.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x28382c8 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_X")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836448 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x2838380 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MIBC7F~1.0_N")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2836458 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa6) returned 0x2838438 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0B0E~1.0_N")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838588 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb6) returned 0x28388f0 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIACEC~1.0_N")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838628 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x28389b0 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838598 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0x2838a68 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838698 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa4) returned 0x2838b10 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28385a8 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9a) returned 0x2838bc0 [0178.166] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1 [0178.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838528 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa8) returned 0x2838c68 [0178.167] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838558 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0x2838d18 [0178.167] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.SCA")) returned 1 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838578 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc6) returned 0x2838dc0 [0178.167] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838678 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x2838e90 [0178.167] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_X")) returned 1 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838568 [0178.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0x2838f48 [0178.168] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIBA67~1.SCA")) returned 1 [0178.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28386a8 [0178.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xca) returned 0x2838ff0 [0178.168] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICC3B~1.0_N")) returned 1 [0178.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28386d8 [0178.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x28390c8 [0178.168] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBB30~1.0_X")) returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28385c8 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa4) returned 0x2839180 [0178.182] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2247~1.0_N")) returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838618 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0x2839230 [0178.182] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIECF5~1.0_X")) returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28386f8 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x28392f0 [0178.182] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIEB19~1.SCA")) returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28385b8 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xda) returned 0x28393a8 [0178.182] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE745~1.0_X")) returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838688 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb4) returned 0x2839490 [0178.182] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838538 [0178.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x2839550 [0178.182] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MIAA8F~1.SCA")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838548 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc0) returned 0x2839618 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_N")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838638 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa4) returned 0x28396e0 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI79E2~1.0_X")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28385d8 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9a) returned 0x2839790 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI5BB5~1.0_N")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28385e8 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x2839838 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID6EE~1.SCA")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838518 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc8) returned 0x28398f0 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE03D~1.0_X")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28385f8 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa2) returned 0x28399c0 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAA72~1.0_N")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838608 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc0) returned 0x2839a70 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI825E~1.0_X")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838708 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb6) returned 0x2839b38 [0178.183] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI476B~1.0_X")) returned 1 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28386b8 [0178.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0x2839bf8 [0178.184] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC168~1.0_N")) returned 1 [0178.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838648 [0178.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc2) returned 0x2839cb8 [0178.184] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06F6~1.SCA")) returned 1 [0178.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838658 [0178.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xec) returned 0x2839d88 [0178.184] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI9806~1.0_N")) returned 1 [0178.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28386c8 [0178.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd0) returned 0x2839e80 [0178.184] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA86~1.0_X")) returned 1 [0178.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838668 [0178.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc6) returned 0x2839f58 [0178.199] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIA5B6~1.SCA")) returned 1 [0178.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28386e8 [0178.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd8) returned 0x283a028 [0178.199] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIFFC1~1.0_N")) returned 1 [0178.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28387f8 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbc) returned 0x283a108 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIAB25~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838818 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb2) returned 0x283a1d0 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34B5~1.0_N")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28387d8 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283a290 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI21E8~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838728 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa2) returned 0x283a348 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI052E~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838858 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a3f8 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI3AF7~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28387a8 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a4c0 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4ACC~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838838 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a588 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0106~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28387e8 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a650 [0178.200] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI04D1~1.0_X")) returned 1 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838848 [0178.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a718 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIF51B~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28388c8 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a7e0 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI67F0~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838828 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a8a8 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI2C2E~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838788 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283a970 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEBDA~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838868 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283aa38 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA018~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838878 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283ab00 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7399~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28388d8 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283abc8 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI38C6~1.0_X")) returned 1 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838808 [0178.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283ac90 [0178.201] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7D40~1.0_X")) returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838798 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283ad58 [0178.214] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA22A~1.0_X")) returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838718 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283bac8 [0178.214] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEC84~1.0_X")) returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838888 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b0a0 [0178.214] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI6E3E~1.0_X")) returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838898 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283bb90 [0178.214] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBE4A~1.0_X")) returned 1 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838738 [0178.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b3c0 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI7387~1.0_X")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28388a8 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283ae48 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI20CB~1.0_X")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28388b8 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb2) returned 0x283be28 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAECB~1.0_N")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838748 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc0) returned 0x283b488 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4126~1.0_X")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838768 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283bee8 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI01E4~1.0_N")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28387b8 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283bd20 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI4988~1.SCA")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838758 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xca) returned 0x283bfa0 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2A4A~1.0_N")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x2838778 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x283c078 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI5B43~1.0_X")) returned 1 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x28387c8 [0178.215] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa4) returned 0x283c130 [0178.215] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI155A~1.SCA")) returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c540 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc2) returned 0x283c5e8 [0178.216] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI698D~1.0_X")) returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c560 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9c) returned 0x283c6b8 [0178.216] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI86E0~1.0_N")) returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c550 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283c760 [0178.216] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4486~1.0_X")) returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c570 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc0) returned 0x283b2f8 [0178.216] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI9817~1.0_X")) returned 1 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c420 [0178.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc0) returned 0x283b550 [0178.216] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", cAlternateFileName="MI66C7~1.SCA")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c470 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc2) returned 0x283c818 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", cAlternateFileName="MI29A2~1.0_N")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c480 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa6) returned 0x283c8e8 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", cAlternateFileName="MIC69C~1.0_X")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c430 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9c) returned 0x283c998 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIC910~1.0_X")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c440 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa8) returned 0x283ca40 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI3F66~1.0_N")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c490 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb4) returned 0x283caf0 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.1_X")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c520 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x283cbb0 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.1_X")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c450 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x283cc68 [0178.223] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI72FF~1.0_X")) returned 1 [0178.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c4a0 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x283cd20 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA7C9~1.0_X")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c5d0 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x283cdd8 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB6B3~1.0_N")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c4b0 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa4) returned 0x283ce90 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIF132~1.0_X")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c410 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9a) returned 0x283cf40 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MI5B39~1.SCA")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c4c0 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd8) returned 0x283cfe8 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI10C6~1.SCA")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c580 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd4) returned 0x283d0c8 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe", cAlternateFileName="MI5D6F~1.SCA")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c5b0 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd4) returned 0x283d1a8 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI0911~1.0_X")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c590 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x283d288 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC62C~1.0_N")) returned 1 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c460 [0178.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbc) returned 0x283bc58 [0178.224] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIB044~1.SCA")) returned 1 [0178.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c4d0 [0178.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd2) returned 0x283d340 [0178.225] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI41D1~1.0_X")) returned 1 [0178.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c4e0 [0178.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283da08 [0178.225] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI6662~1.0_N")) returned 1 [0178.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c4f0 [0178.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0x283e428 [0178.264] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI4B57~1.SCA")) returned 1 [0178.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c5a0 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xda) returned 0x283e4e8 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7930~1.0_X")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c5c0 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb4) returned 0x283e5d0 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIE825~1.0_N")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c500 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc2) returned 0x283e690 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe", cAlternateFileName="MIAB71~1.SCA")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c510 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd2) returned 0x283e760 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MIA7A5~1.SCA")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c530 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd2) returned 0x283e840 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIA450~1.0_N")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c3a0 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb6) returned 0x283e920 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI9599~1.0_X")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c390 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283dda0 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIB685~1.0_X")) returned 1 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c2c0 [0178.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc8) returned 0x283e9e0 [0178.265] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIF624~1.0_N")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c2d0 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd6) returned 0x283eab0 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI0ADF~1.SCA")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c300 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xde) returned 0x283eb90 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0319~1.0_N")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c280 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc2) returned 0x283ec78 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI214C~1.0_X")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c310 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0x283ed48 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1C44~1.0_N")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c400 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb4) returned 0x283ee08 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI97D5~1.SCA")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c370 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd0) returned 0x283eec8 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE984~1.0_X")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c3e0 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xaa) returned 0x283de58 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe", cAlternateFileName="MID9F7~1.0_X")) returned 1 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c380 [0178.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283df10 [0178.266] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI99D1~1.0_N")) returned 1 [0178.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c3f0 [0178.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb6) returned 0xde0048 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI22BC~1.0_X")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c220 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b7a8 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB231~1.0_N")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c3b0 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc8) returned 0xde0108 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06B9~1.SCA")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c3c0 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd4) returned 0xde01d8 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI101B~1.0_X")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c3d0 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x283dc30 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2427~1.0_N")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c210 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b870 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1B9A~1.0_N")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c230 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x283dfc8 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7B67~1.0_X")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c2a0 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0xde02b8 [0178.275] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI5488~1.SCA")) returned 1 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c240 [0178.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd2) returned 0xde0360 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34BC~1.0_N")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c340 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb6) returned 0xde0440 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7E75~1.0_X")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c250 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xac) returned 0x283e080 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4965~1.0_X")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c260 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b168 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI58AE~1.0_N")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c2b0 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc8) returned 0xde0500 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI0679~1.SCA")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c2e0 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe2) returned 0xde05d0 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB74B~1.0_N")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c290 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc6) returned 0xde06c0 [0178.276] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA0B~1.0_X")) returned 1 [0178.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0x283c270 [0178.277] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID586~1.SCA")) returned 1 [0178.277] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7C12~1.0_X")) returned 1 [0178.277] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIDC33~1.0_N")) returned 1 [0178.279] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe", cAlternateFileName="MIA74D~1.SCA")) returned 1 [0178.279] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI691C~1.0_X")) returned 1 [0178.279] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI984C~1.0_N")) returned 1 [0178.279] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 1 [0178.279] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 0 [0178.279] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0178.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb78b738, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb78b738, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0178.280] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb78b738, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb78b738, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.280] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19c850, ftCreationTime.dwHighDateTime=0x1d5dc6e, ftLastAccessTime.dwLowDateTime=0x7c6e2640, ftLastAccessTime.dwHighDateTime=0x1d5f06e, ftLastWriteTime.dwLowDateTime=0x7c6e2640, ftLastWriteTime.dwHighDateTime=0x1d5f06e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0178.280] CreateFileW (lpFileName="C:\\Program Files\\Windows Security\\alftp.exe" (normalized: "c:\\program files\\windows security\\alftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.281] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1 [0178.281] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec15c750, ftCreationTime.dwHighDateTime=0x1d5c7a1, ftLastAccessTime.dwLowDateTime=0xe075510, ftLastAccessTime.dwHighDateTime=0x1d5c1c4, ftLastWriteTime.dwLowDateTime=0xe075510, ftLastWriteTime.dwHighDateTime=0x1d5c1c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0178.281] CreateFileW (lpFileName="C:\\Program Files\\Windows Security\\mxslipstream.exe" (normalized: "c:\\program files\\windows security\\mxslipstream.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.282] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec15c750, ftCreationTime.dwHighDateTime=0x1d5c7a1, ftLastAccessTime.dwLowDateTime=0xe075510, ftLastAccessTime.dwHighDateTime=0x1d5c1c4, ftLastWriteTime.dwLowDateTime=0xe075510, ftLastWriteTime.dwHighDateTime=0x1d5c1c4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 0 [0178.282] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0178.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0178.282] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.282] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0178.282] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.284] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0178.284] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0178.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb5c1ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5c1ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0178.284] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb5c1ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5c1ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.284] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0178.284] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4266320, ftCreationTime.dwHighDateTime=0x1d57b37, ftLastAccessTime.dwLowDateTime=0x6d445f40, ftLastAccessTime.dwHighDateTime=0x1d58bb0, ftLastWriteTime.dwLowDateTime=0x6d445f40, ftLastWriteTime.dwHighDateTime=0x1d58bb0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0178.284] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\far.exe" (normalized: "c:\\program files\\windows photo viewer\\far.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.285] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0178.285] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.288] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x22c400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0178.288] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.296] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abd1547, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x206cbb35, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4abd1547, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1db800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0178.296] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.296] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0178.296] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.300] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0178.300] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.301] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0178.301] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0178.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24198 [0178.301] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.301] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0178.302] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0178.302] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0178.302] FindClose (in: hFindFile=0xd24198 | out: hFindFile=0xd24198) returned 1 [0178.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb5c1ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5c1ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0178.302] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb5c1ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5c1ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.302] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3496d0, ftCreationTime.dwHighDateTime=0x1d5d2c3, ftLastAccessTime.dwLowDateTime=0x8be990a0, ftLastAccessTime.dwHighDateTime=0x1d5d480, ftLastWriteTime.dwLowDateTime=0x8be990a0, ftLastWriteTime.dwHighDateTime=0x1d5d480, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1 [0178.302] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\absolutetelnet.exe" (normalized: "c:\\program files\\windows multimedia platform\\absolutetelnet.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.303] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2cf4580, ftCreationTime.dwHighDateTime=0x1d570b2, ftLastAccessTime.dwLowDateTime=0x94162180, ftLastAccessTime.dwHighDateTime=0x1d5a6fe, ftLastWriteTime.dwLowDateTime=0x94162180, ftLastWriteTime.dwHighDateTime=0x1d5a6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0178.303] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\coreftp.exe" (normalized: "c:\\program files\\windows multimedia platform\\coreftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.303] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0178.303] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\sqmapi.dll" (normalized: "c:\\program files\\windows multimedia platform\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.304] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0178.304] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0178.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0178.304] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.304] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef909480, ftCreationTime.dwHighDateTime=0x1d5bf01, ftLastAccessTime.dwLowDateTime=0xed44680, ftLastAccessTime.dwHighDateTime=0x1d56876, ftLastWriteTime.dwLowDateTime=0xed44680, ftLastWriteTime.dwHighDateTime=0x1d56876, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0178.304] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\ccv_server.exe" (normalized: "c:\\program files\\windows media player\\ccv_server.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.304] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0178.305] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0178.305] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad590b0, ftCreationTime.dwHighDateTime=0x1d581c1, ftLastAccessTime.dwLowDateTime=0xc62c7aa0, ftLastAccessTime.dwHighDateTime=0x1d5b335, ftLastWriteTime.dwLowDateTime=0xc62c7aa0, ftLastWriteTime.dwHighDateTime=0x1d5b335, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0178.305] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\leechftp.exe" (normalized: "c:\\program files\\windows media player\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.305] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0178.305] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0178.305] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files\\windows media player\\mpvis.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.306] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0178.306] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0178.306] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files\\windows media player\\setup_wm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.308] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0178.308] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0178.308] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0178.308] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.309] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b148c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0178.309] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.310] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2f0d0100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0178.310] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files\\windows media player\\wmplayer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.318] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2c1c100, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0178.318] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.322] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3f71b00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x11f600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0178.322] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpnetwk.exe" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.322] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xbefe7b00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0178.323] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpnscfg.exe" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.323] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x4b5c6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0178.323] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.324] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x45b35800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0178.324] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.325] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x5fed3600, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0178.325] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files\\windows media player\\wmprph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.325] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0178.325] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files\\windows media player\\wmpshare.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.326] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0178.326] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0178.326] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0178.348] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.348] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0178.349] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0178.349] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.350] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0178.350] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.351] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0178.351] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.352] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0178.352] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.355] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0178.355] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.362] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0178.363] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.363] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0178.363] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0178.363] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0178.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0178.369] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.369] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0178.369] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1 [0178.370] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\mssense.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.371] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1 [0178.371] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\SenseCncProxy.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\sensecncproxy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.371] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1 [0178.371] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\SenseCncPS.dll" (normalized: "c:\\program files\\windows defender advanced threat protection\\sensecncps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.400] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1 [0178.400] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\SenseSampleUploader.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\sensesampleuploader.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.414] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1 [0178.414] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\WATPCSP.dll" (normalized: "c:\\program files\\windows defender advanced threat protection\\watpcsp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.418] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0 [0178.418] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0178.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb65a4fc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb65a4fc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0178.419] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb65a4fc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb65a4fc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.419] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AmMonitoringInstall.mof", cAlternateFileName="")) returned 1 [0178.419] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\AmMonitoringInstall.mof" (normalized: "c:\\program files\\windows defender\\ammonitoringinstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.444] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AMMonitoringProvider.dll", cAlternateFileName="")) returned 1 [0178.444] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\AMMonitoringProvider.dll" (normalized: "c:\\program files\\windows defender\\ammonitoringprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.444] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x520c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AmStatusInstall.mof", cAlternateFileName="")) returned 1 [0178.445] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\AmStatusInstall.mof" (normalized: "c:\\program files\\windows defender\\amstatusinstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.445] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClientWMIInstall.mof", cAlternateFileName="")) returned 1 [0178.445] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ClientWMIInstall.mof" (normalized: "c:\\program files\\windows defender\\clientwmiinstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.446] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ConfigSecurityPolicy.exe", cAlternateFileName="")) returned 1 [0178.446] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ConfigSecurityPolicy.exe" (normalized: "c:\\program files\\windows defender\\configsecuritypolicy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.446] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DataLayer.dll", cAlternateFileName="")) returned 1 [0178.446] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\DataLayer.dll" (normalized: "c:\\program files\\windows defender\\datalayer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.446] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x171cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DbgHelp.dll", cAlternateFileName="")) returned 1 [0178.446] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\DbgHelp.dll" (normalized: "c:\\program files\\windows defender\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.447] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af3c42, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26af3c42, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26af3c42, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DefenderCSP.dll", cAlternateFileName="")) returned 1 [0178.447] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\DefenderCSP.dll" (normalized: "c:\\program files\\windows defender\\defendercsp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.448] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Defendericon.png", cAlternateFileName="")) returned 1 [0178.448] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\Defendericon.png" (normalized: "c:\\program files\\windows defender\\defendericon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.475] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0178.475] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0178.475] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\EppManifest.dll" (normalized: "c:\\program files\\windows defender\\eppmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.476] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FepUnregister.mof", cAlternateFileName="")) returned 1 [0178.477] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\FepUnregister.mof" (normalized: "c:\\program files\\windows defender\\fepunregister.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.477] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f9baad, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0178.478] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.509] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAzSubmit.dll", cAlternateFileName="")) returned 1 [0178.509] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpAzSubmit.dll" (normalized: "c:\\program files\\windows defender\\mpazsubmit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.509] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ca0b8b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xe9da0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0178.509] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.509] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f2939c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6af10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0178.509] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.511] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x874d15c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x53fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0178.512] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.519] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1dba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0178.519] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.520] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x880bd29, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0178.520] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.521] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cda0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpProvider.dll", cAlternateFileName="")) returned 1 [0178.521] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpProvider.dll" (normalized: "c:\\program files\\windows defender\\mpprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.521] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6507363, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xac7a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpRtp.dll", cAlternateFileName="")) returned 1 [0178.521] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpRtp.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.522] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x842bfe5, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x2099a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0178.522] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.522] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x53a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpuxhostproxy.dll", cAlternateFileName="")) returned 1 [0178.523] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\mpuxhostproxy.dll" (normalized: "c:\\program files\\windows defender\\mpuxhostproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.523] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpUXSrv.exe", cAlternateFileName="")) returned 1 [0178.523] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpUXSrv.exe" (normalized: "c:\\program files\\windows defender\\mpuxsrv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.524] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x92ec92b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x137d98, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0178.524] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.524] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x999a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSASCuiL.exe", cAlternateFileName="")) returned 1 [0178.524] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MSASCuiL.exe" (normalized: "c:\\program files\\windows defender\\msascuil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.524] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x147a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0178.524] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.525] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x849e6f2, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x191a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpEng.exe", cAlternateFileName="")) returned 1 [0178.525] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpEng.exe" (normalized: "c:\\program files\\windows defender\\msmpeng.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.526] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0178.526] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.526] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x89d596d, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6c9a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0178.527] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.527] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpResL.dll", cAlternateFileName="")) returned 1 [0178.527] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpResL.dll" (normalized: "c:\\program files\\windows defender\\msmpresl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.528] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeda0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NisLog.dll", cAlternateFileName="")) returned 1 [0178.528] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\NisLog.dll" (normalized: "c:\\program files\\windows defender\\nislog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.533] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x538f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NisSrv.exe", cAlternateFileName="")) returned 1 [0178.533] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\NisSrv.exe" (normalized: "c:\\program files\\windows defender\\nissrv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.533] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NisWfp.dll", cAlternateFileName="")) returned 1 [0178.533] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\NisWfp.dll" (normalized: "c:\\program files\\windows defender\\niswfp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.533] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0178.534] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e7e260, ftCreationTime.dwHighDateTime=0x1d5a7ec, ftLastAccessTime.dwLowDateTime=0xadffcf60, ftLastAccessTime.dwHighDateTime=0x1d5822d, ftLastWriteTime.dwLowDateTime=0xadffcf60, ftLastWriteTime.dwHighDateTime=0x1d5822d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0178.534] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\outlook.exe" (normalized: "c:\\program files\\windows defender\\outlook.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.534] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1 [0178.534] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ProtectionManagement.dll" (normalized: "c:\\program files\\windows defender\\protectionmanagement.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.536] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement.mof", cAlternateFileName="")) returned 1 [0178.536] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ProtectionManagement.mof" (normalized: "c:\\program files\\windows defender\\protectionmanagement.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.538] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mof", cAlternateFileName="")) returned 1 [0178.538] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ProtectionManagement_Uninstall.mof" (normalized: "c:\\program files\\windows defender\\protectionmanagement_uninstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.539] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x505a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0178.539] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\shellext.dll" (normalized: "c:\\program files\\windows defender\\shellext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.540] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SymSrv.dll", cAlternateFileName="")) returned 1 [0178.540] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\SymSrv.dll" (normalized: "c:\\program files\\windows defender\\symsrv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.540] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SymSrv.yes", cAlternateFileName="")) returned 1 [0178.540] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\SymSrv.yes" (normalized: "c:\\program files\\windows defender\\symsrv.yes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.541] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 1 [0178.541] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ThirdPartyNotices.txt" (normalized: "c:\\program files\\windows defender\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.542] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 0 [0178.542] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0178.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xeb5e7d88, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb5e7d88, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0178.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0178.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1710 [0178.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0178.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0178.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0178.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.570] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.570] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde15a8 [0178.570] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde15f8 [0178.570] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1808 [0178.570] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15f8 | out: hHeap=0x2830000) returned 1 [0178.570] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1808 | out: hHeap=0x2830000) returned 1 [0178.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.571] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1430 | out: hHeap=0x2830000) returned 1 [0178.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc86, lpOverlapped=0x0) returned 1 [0178.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff37a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc90, lpOverlapped=0x0) returned 1 [0178.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.572] CloseHandle (hObject=0x1ec) returned 1 [0178.573] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.573] SetEndOfFile (hFile=0x1dc) returned 1 [0178.595] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Task.xml" (normalized: "c:\\program files\\unp\\task.xml"), lpNewFileName="C:\\Program Files\\UNP\\Task.xml.vhd" (normalized: "c:\\program files\\unp\\task.xml.vhd")) returned 1 [0178.596] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 0 [0178.596] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0178.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0178.597] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.597] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ee4ec0, ftCreationTime.dwHighDateTime=0x1d5b758, ftLastAccessTime.dwLowDateTime=0x5e4bc560, ftLastAccessTime.dwHighDateTime=0x1d5f11c, ftLastWriteTime.dwLowDateTime=0x5e4bc560, ftLastWriteTime.dwHighDateTime=0x1d5f11c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0178.597] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\flashfxp.exe" (normalized: "c:\\program files\\uninstall information\\flashfxp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.597] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc98a510, ftCreationTime.dwHighDateTime=0x1d5c3f4, ftLastAccessTime.dwLowDateTime=0x1499d660, ftLastAccessTime.dwHighDateTime=0x1d5ab2a, ftLastWriteTime.dwLowDateTime=0x1499d660, ftLastWriteTime.dwHighDateTime=0x1d5ab2a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0178.597] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\fling.exe" (normalized: "c:\\program files\\uninstall information\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.597] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f9efd0, ftCreationTime.dwHighDateTime=0x1d5bdb3, ftLastAccessTime.dwLowDateTime=0x8b633680, ftLastAccessTime.dwHighDateTime=0x1d5b23a, ftLastWriteTime.dwLowDateTime=0x8b633680, ftLastWriteTime.dwHighDateTime=0x1d5b23a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prefer.exe", cAlternateFileName="")) returned 1 [0178.597] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\prefer.exe" (normalized: "c:\\program files\\uninstall information\\prefer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.597] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c0f5ac0, ftCreationTime.dwHighDateTime=0x1d5eeb6, ftLastAccessTime.dwLowDateTime=0xc38ea840, ftLastAccessTime.dwHighDateTime=0x1d5ed5f, ftLastWriteTime.dwLowDateTime=0xc38ea840, ftLastWriteTime.dwHighDateTime=0x1d5ed5f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="secure idol.exe", cAlternateFileName="SECURE~1.EXE")) returned 1 [0178.597] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\secure idol.exe" (normalized: "c:\\program files\\uninstall information\\secure idol.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.598] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba1f9820, ftCreationTime.dwHighDateTime=0x1d57f58, ftLastAccessTime.dwLowDateTime=0xb3eb40e0, ftLastAccessTime.dwHighDateTime=0x1d58ac4, ftLastWriteTime.dwLowDateTime=0xb3eb40e0, ftLastWriteTime.dwHighDateTime=0x1d58ac4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0178.598] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\spcwin.exe" (normalized: "c:\\program files\\uninstall information\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.598] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892e16f0, ftCreationTime.dwHighDateTime=0x1d5cd29, ftLastAccessTime.dwLowDateTime=0x85dbe950, ftLastAccessTime.dwHighDateTime=0x1d5e9b2, ftLastWriteTime.dwLowDateTime=0x85dbe950, ftLastWriteTime.dwHighDateTime=0x1d5e9b2, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0178.598] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\winscp.exe" (normalized: "c:\\program files\\uninstall information\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.598] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537c7430, ftCreationTime.dwHighDateTime=0x1d56946, ftLastAccessTime.dwLowDateTime=0xd97344a0, ftLastAccessTime.dwHighDateTime=0x1d59093, ftLastWriteTime.dwLowDateTime=0xd97344a0, ftLastWriteTime.dwHighDateTime=0x1d59093, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1 [0178.598] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\yahoomessenger.exe" (normalized: "c:\\program files\\uninstall information\\yahoomessenger.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.598] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537c7430, ftCreationTime.dwHighDateTime=0x1d56946, ftLastAccessTime.dwLowDateTime=0xd97344a0, ftLastAccessTime.dwHighDateTime=0x1d59093, ftLastWriteTime.dwLowDateTime=0xd97344a0, ftLastWriteTime.dwHighDateTime=0x1d59093, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 0 [0178.599] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0178.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\rempl\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0178.599] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.599] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e00e440, ftCreationTime.dwHighDateTime=0x1d5d61b, ftLastAccessTime.dwLowDateTime=0xfaa653f0, ftLastAccessTime.dwHighDateTime=0x1d5a6ba, ftLastWriteTime.dwLowDateTime=0xfaa653f0, ftLastWriteTime.dwHighDateTime=0x1d5a6ba, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1 [0178.599] CreateFileW (lpFileName="C:\\Program Files\\rempl\\icq.exe" (normalized: "c:\\program files\\rempl\\icq.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.599] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0178.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0ba0 [0178.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x38) returned 0x2837940 [0178.599] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4686070, ftCreationTime.dwHighDateTime=0x1d597e0, ftLastAccessTime.dwLowDateTime=0x59d1eef0, ftLastAccessTime.dwHighDateTime=0x1d56f68, ftLastWriteTime.dwLowDateTime=0x59d1eef0, ftLastWriteTime.dwHighDateTime=0x1d56f68, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="look-albuquerque.exe", cAlternateFileName="LOOK-A~1.EXE")) returned 1 [0178.599] CreateFileW (lpFileName="C:\\Program Files\\rempl\\look-albuquerque.exe" (normalized: "c:\\program files\\rempl\\look-albuquerque.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.600] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ed9010, ftCreationTime.dwHighDateTime=0x1d5b25e, ftLastAccessTime.dwLowDateTime=0x7008c0f0, ftLastAccessTime.dwHighDateTime=0x1d5de66, ftLastWriteTime.dwLowDateTime=0x7008c0f0, ftLastWriteTime.dwHighDateTime=0x1d5de66, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memo playing intl.exe", cAlternateFileName="MEMOPL~1.EXE")) returned 1 [0178.600] CreateFileW (lpFileName="C:\\Program Files\\rempl\\memo playing intl.exe" (normalized: "c:\\program files\\rempl\\memo playing intl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.600] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76938800, ftCreationTime.dwHighDateTime=0x1d2e919, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x76938800, ftLastWriteTime.dwHighDateTime=0x1d2e919, nFileSizeHigh=0x0, nFileSizeLow=0xf2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rempl.xml", cAlternateFileName="")) returned 1 [0178.600] CreateFileW (lpFileName="C:\\Program Files\\rempl\\rempl.xml" (normalized: "c:\\program files\\rempl\\rempl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.607] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1430 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde15a8 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1710 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c20 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c20 | out: hHeap=0x2830000) returned 1 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.608] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde15a8 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde15f8 [0178.608] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1808 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15f8 | out: hHeap=0x2830000) returned 1 [0178.608] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1808 | out: hHeap=0x2830000) returned 1 [0178.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1430 | out: hHeap=0x2830000) returned 1 [0178.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf2c, lpOverlapped=0x0) returned 1 [0178.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf30, lpOverlapped=0x0) returned 1 [0178.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.613] CloseHandle (hObject=0x1ec) returned 1 [0178.617] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.617] SetEndOfFile (hFile=0x1dc) returned 1 [0178.630] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\rempl.xml" (normalized: "c:\\program files\\rempl\\rempl.xml"), lpNewFileName="C:\\Program Files\\rempl\\rempl.xml.vhd" (normalized: "c:\\program files\\rempl\\rempl.xml.vhd")) returned 1 [0178.630] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a4a100, ftCreationTime.dwHighDateTime=0x1d3176b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x58a4a100, ftLastWriteTime.dwHighDateTime=0x1d3176b, nFileSizeHigh=0x0, nFileSizeLow=0x65008, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="remsh.exe", cAlternateFileName="")) returned 1 [0178.631] CreateFileW (lpFileName="C:\\Program Files\\rempl\\remsh.exe" (normalized: "c:\\program files\\rempl\\remsh.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1430 [0178.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde15a8 [0178.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0178.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0178.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1710 [0178.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ae0 [0178.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0178.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ae0 | out: hHeap=0x2830000) returned 1 [0178.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.651] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde15a8 [0178.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde15f8 [0178.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1808 [0178.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15f8 | out: hHeap=0x2830000) returned 1 [0178.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1808 | out: hHeap=0x2830000) returned 1 [0178.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.652] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1430 | out: hHeap=0x2830000) returned 1 [0178.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1008, lpOverlapped=0x0) returned 1 [0178.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeff8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1010, lpOverlapped=0x0) returned 1 [0178.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.684] CloseHandle (hObject=0x1ec) returned 1 [0178.699] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.699] SetEndOfFile (hFile=0x1dc) returned 1 [0178.699] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\remsh.exe" (normalized: "c:\\program files\\rempl\\remsh.exe"), lpNewFileName="C:\\Program Files\\rempl\\remsh.exe.vhd" (normalized: "c:\\program files\\rempl\\remsh.exe.vhd")) returned 1 [0178.700] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unlock.xml", cAlternateFileName="")) returned 1 [0178.700] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Unlock.xml" (normalized: "c:\\program files\\rempl\\unlock.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.717] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1430 [0178.717] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde15a8 [0178.718] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0178.718] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0178.718] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1710 [0178.718] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0178.718] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.718] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0178.718] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0178.718] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.718] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.719] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.719] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde15a8 [0178.719] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde15f8 [0178.719] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1808 [0178.719] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15f8 | out: hHeap=0x2830000) returned 1 [0178.719] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1808 | out: hHeap=0x2830000) returned 1 [0178.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde15a8 [0178.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0178.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1430 | out: hHeap=0x2830000) returned 1 [0178.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x605, lpOverlapped=0x0) returned 1 [0178.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9fb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x610, lpOverlapped=0x0) returned 1 [0178.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.721] CloseHandle (hObject=0x1ec) returned 1 [0178.726] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.726] SetEndOfFile (hFile=0x1dc) returned 1 [0178.727] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\Unlock.xml" (normalized: "c:\\program files\\rempl\\unlock.xml"), lpNewFileName="C:\\Program Files\\rempl\\Unlock.xml.vhd" (normalized: "c:\\program files\\rempl\\unlock.xml.vhd")) returned 1 [0178.728] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unlock.xml", cAlternateFileName="")) returned 0 [0178.728] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0178.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0178.729] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.729] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4163ee80, ftCreationTime.dwHighDateTime=0x1d5aa88, ftLastAccessTime.dwLowDateTime=0x880f9120, ftLastAccessTime.dwHighDateTime=0x1d5b73c, ftLastWriteTime.dwLowDateTime=0x880f9120, ftLastWriteTime.dwHighDateTime=0x1d5b73c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0178.729] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\3dftp.exe" (normalized: "c:\\program files\\reference assemblies\\3dftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.729] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc151c130, ftCreationTime.dwHighDateTime=0x1d5b1c2, ftLastAccessTime.dwLowDateTime=0x35972670, ftLastAccessTime.dwHighDateTime=0x1d5a296, ftLastWriteTime.dwLowDateTime=0x35972670, ftLastWriteTime.dwHighDateTime=0x1d5a296, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0178.729] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\aldelo.exe" (normalized: "c:\\program files\\reference assemblies\\aldelo.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.729] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0178.729] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0b90 [0178.729] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0xde1430 [0178.729] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x841e2680, ftCreationTime.dwHighDateTime=0x1d5c8b2, ftLastAccessTime.dwLowDateTime=0xcb77cfd0, ftLastAccessTime.dwHighDateTime=0x1d5663e, ftLastWriteTime.dwLowDateTime=0xcb77cfd0, ftLastWriteTime.dwHighDateTime=0x1d5663e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pendingwindsorbouquet.exe", cAlternateFileName="PENDIN~1.EXE")) returned 1 [0178.729] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\pendingwindsorbouquet.exe" (normalized: "c:\\program files\\reference assemblies\\pendingwindsorbouquet.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.730] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x841e2680, ftCreationTime.dwHighDateTime=0x1d5c8b2, ftLastAccessTime.dwLowDateTime=0xcb77cfd0, ftLastAccessTime.dwHighDateTime=0x1d5663e, ftLastWriteTime.dwLowDateTime=0xcb77cfd0, ftLastWriteTime.dwHighDateTime=0x1d5663e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pendingwindsorbouquet.exe", cAlternateFileName="PENDIN~1.EXE")) returned 0 [0178.730] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0178.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0178.730] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.730] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0178.730] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0ae0 [0178.730] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x46) returned 0xde1498 [0178.730] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e08d1c0, ftCreationTime.dwHighDateTime=0x1d5b671, ftLastAccessTime.dwLowDateTime=0x41c5e530, ftLastAccessTime.dwHighDateTime=0x1d56dee, ftLastWriteTime.dwLowDateTime=0x41c5e530, ftLastWriteTime.dwHighDateTime=0x1d56dee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0178.730] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\utg2.exe" (normalized: "c:\\program files\\msbuild\\utg2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0178.731] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e08d1c0, ftCreationTime.dwHighDateTime=0x1d5b671, ftLastAccessTime.dwLowDateTime=0x41c5e530, ftLastAccessTime.dwHighDateTime=0x1d56dee, ftLastWriteTime.dwLowDateTime=0x41c5e530, ftLastWriteTime.dwHighDateTime=0x1d56dee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0178.731] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0178.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24558 [0178.732] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.735] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9eac3a9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9eac3a9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf3efc600, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessible.tlb", cAlternateFileName="ACCESS~1.TLB")) returned 1 [0178.735] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\Accessible.tlb" (normalized: "c:\\program files\\mozilla firefox\\accessible.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0178.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0178.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0178.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0178.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0178.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ad0 [0178.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0178.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ad0 | out: hHeap=0x2830000) returned 1 [0178.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.746] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0178.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0178.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0178.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0178.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0178.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.748] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0178.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbc0, lpOverlapped=0x0) returned 1 [0178.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff440, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xbc0, lpOverlapped=0x0) returned 1 [0178.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.749] CloseHandle (hObject=0x1ec) returned 1 [0178.764] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.765] SetEndOfFile (hFile=0x1dc) returned 1 [0178.773] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\Accessible.tlb" (normalized: "c:\\program files\\mozilla firefox\\accessible.tlb"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\Accessible.tlb.vhd" (normalized: "c:\\program files\\mozilla firefox\\accessible.tlb.vhd")) returned 1 [0178.800] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae059bd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae059bd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x72516580, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1f1d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessibleHandler.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0178.800] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleHandler.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblehandler.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0178.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0178.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0178.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0178.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0178.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0b10 [0178.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0178.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0b10 | out: hHeap=0x2830000) returned 1 [0178.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.811] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.811] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0178.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0178.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0178.811] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0178.811] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0178.812] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.812] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.813] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.813] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0178.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x11d0, lpOverlapped=0x0) returned 1 [0178.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x11d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x11d0, lpOverlapped=0x0) returned 1 [0178.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.836] CloseHandle (hObject=0x1ec) returned 1 [0178.842] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.842] SetEndOfFile (hFile=0x1dc) returned 1 [0178.843] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleHandler.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblehandler.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleHandler.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\accessiblehandler.dll.vhd")) returned 1 [0178.845] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73829280, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x73d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~2.DLL")) returned 1 [0178.845] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblemarshal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.856] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.857] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0178.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0178.857] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0178.859] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.859] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.859] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.859] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0178.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x13d0, lpOverlapped=0x0) returned 1 [0178.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x13d0, lpOverlapped=0x0) returned 1 [0178.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.887] CloseHandle (hObject=0x1ec) returned 1 [0178.915] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.915] SetEndOfFile (hFile=0x1dc) returned 1 [0178.932] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblemarshal.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\accessiblemarshal.dll.vhd")) returned 1 [0178.933] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0178.933] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-console-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.943] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0178.943] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0178.943] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0178.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0178.943] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0178.943] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0178.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.944] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0178.944] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0178.944] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.944] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.944] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0178.944] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0178.944] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0178.944] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0178.944] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0178.944] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0178.945] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.945] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0178.945] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0178.945] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0178.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0178.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0178.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0178.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0178.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0178.991] CloseHandle (hObject=0x1ec) returned 1 [0178.994] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.994] SetEndOfFile (hFile=0x1dc) returned 1 [0178.995] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-console-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-console-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-console-l1-1-0.dll.vhd")) returned 1 [0178.995] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0178.995] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-datetime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0178.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0178.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0178.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.044] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.045] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.045] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.045] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0179.045] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0179.045] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.046] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0179.046] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.046] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.046] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0179.046] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.046] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.046] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.046] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.046] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.046] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.046] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.047] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6c0, lpOverlapped=0x0) returned 1 [0179.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0179.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.097] CloseHandle (hObject=0x1ec) returned 1 [0179.102] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.103] SetEndOfFile (hFile=0x1dc) returned 1 [0179.169] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-datetime-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-datetime-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-datetime-l1-1-0.dll.vhd")) returned 1 [0179.170] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0179.170] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-debug-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0179.180] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0179.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.180] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0179.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0179.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.181] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6c0, lpOverlapped=0x0) returned 1 [0179.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0179.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.185] CloseHandle (hObject=0x1ec) returned 1 [0179.194] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.194] SetEndOfFile (hFile=0x1dc) returned 1 [0179.194] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-debug-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-debug-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-debug-l1-1-0.dll.vhd")) returned 1 [0179.195] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0179.195] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-errorhandling-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.206] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.207] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.244] CloseHandle (hObject=0x1ec) returned 1 [0179.246] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.246] SetEndOfFile (hFile=0x1dc) returned 1 [0179.246] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-errorhandling-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-errorhandling-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-errorhandling-l1-1-0.dll.vhd")) returned 1 [0179.247] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0179.247] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.256] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16c0, lpOverlapped=0x0) returned 1 [0179.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16c0, lpOverlapped=0x0) returned 1 [0179.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.261] CloseHandle (hObject=0x1ec) returned 1 [0179.266] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.266] SetEndOfFile (hFile=0x1dc) returned 1 [0179.267] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-1-0.dll.vhd")) returned 1 [0179.269] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0179.269] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.279] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.279] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.282] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.288] CloseHandle (hObject=0x1ec) returned 1 [0179.290] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.290] SetEndOfFile (hFile=0x1dc) returned 1 [0179.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-2-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-2-0.dll.vhd")) returned 1 [0179.291] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae9e352, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae9e352, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0179.291] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0179.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0179.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.302] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.304] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.309] CloseHandle (hObject=0x1ec) returned 1 [0179.314] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.314] SetEndOfFile (hFile=0x1dc) returned 1 [0179.315] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l2-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l2-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l2-1-0.dll.vhd")) returned 1 [0179.315] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0179.315] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-handle-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0179.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0179.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a80 [0179.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a80 | out: hHeap=0x2830000) returned 1 [0179.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.325] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.326] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8b8, lpOverlapped=0x0) returned 1 [0179.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.340] CloseHandle (hObject=0x1ec) returned 1 [0179.340] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.340] SetEndOfFile (hFile=0x1dc) returned 1 [0179.341] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-handle-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-handle-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-handle-l1-1-0.dll.vhd")) returned 1 [0179.341] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0179.341] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.350] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.354] CloseHandle (hObject=0x1ec) returned 1 [0179.354] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.354] SetEndOfFile (hFile=0x1dc) returned 1 [0179.354] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-heap-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-heap-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-heap-l1-1-0.dll.vhd")) returned 1 [0179.355] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0179.355] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-interlocked-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.363] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.363] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.363] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0179.364] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.364] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0179.364] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.364] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.364] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.364] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.364] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.364] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.366] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8b8, lpOverlapped=0x0) returned 1 [0179.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.369] CloseHandle (hObject=0x1ec) returned 1 [0179.369] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.369] SetEndOfFile (hFile=0x1dc) returned 1 [0179.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-interlocked-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-interlocked-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-interlocked-l1-1-0.dll.vhd")) returned 1 [0179.370] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0179.370] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-libraryloader-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0179.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0179.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.385] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.386] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.414] CloseHandle (hObject=0x1ec) returned 1 [0179.414] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.414] SetEndOfFile (hFile=0x1dc) returned 1 [0179.414] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-libraryloader-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-libraryloader-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-libraryloader-l1-1-0.dll.vhd")) returned 1 [0179.415] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0179.415] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.428] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.428] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.428] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0179.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0179.428] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.428] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.429] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c0, lpOverlapped=0x0) returned 1 [0179.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12c0, lpOverlapped=0x0) returned 1 [0179.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.435] CloseHandle (hObject=0x1ec) returned 1 [0179.435] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.435] SetEndOfFile (hFile=0x1dc) returned 1 [0179.435] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-localization-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-localization-l1-2-0.dll.vhd")) returned 1 [0179.436] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0179.436] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-memory-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0179.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0179.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.448] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.448] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.448] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.448] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.448] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.448] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.508] CloseHandle (hObject=0x1ec) returned 1 [0179.508] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.508] SetEndOfFile (hFile=0x1dc) returned 1 [0179.517] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-memory-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-memory-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-memory-l1-1-0.dll.vhd")) returned 1 [0179.518] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0179.518] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-namedpipe-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0179.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0179.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.528] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.529] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.542] CloseHandle (hObject=0x1ec) returned 1 [0179.542] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.542] SetEndOfFile (hFile=0x1dc) returned 1 [0179.542] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-namedpipe-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-namedpipe-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-namedpipe-l1-1-0.dll.vhd")) returned 1 [0179.543] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0179.543] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processenvironment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.555] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.556] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.556] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.556] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.558] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.558] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.558] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0179.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0179.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.562] CloseHandle (hObject=0x1ec) returned 1 [0179.563] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.563] SetEndOfFile (hFile=0x1dc) returned 1 [0179.574] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processenvironment-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processenvironment-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processenvironment-l1-1-0.dll.vhd")) returned 1 [0179.575] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0179.575] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0179.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0179.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.584] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10c0, lpOverlapped=0x0) returned 1 [0179.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10c0, lpOverlapped=0x0) returned 1 [0179.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.589] CloseHandle (hObject=0x1ec) returned 1 [0179.589] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.589] SetEndOfFile (hFile=0x1dc) returned 1 [0179.590] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-0.dll.vhd")) returned 1 [0179.590] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0179.590] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0179.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.602] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.603] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.607] CloseHandle (hObject=0x1ec) returned 1 [0179.607] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.607] SetEndOfFile (hFile=0x1dc) returned 1 [0179.607] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-1.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-1.dll.vhd")) returned 1 [0179.608] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0179.608] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-profile-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0179.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0179.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.617] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.617] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.617] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.617] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.617] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.617] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.617] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.617] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.617] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6c0, lpOverlapped=0x0) returned 1 [0179.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0179.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.631] CloseHandle (hObject=0x1ec) returned 1 [0179.631] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.631] SetEndOfFile (hFile=0x1dc) returned 1 [0179.631] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-profile-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-profile-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-profile-l1-1-0.dll.vhd")) returned 1 [0179.632] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0179.632] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0179.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0179.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.643] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.644] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.644] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.644] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8b8, lpOverlapped=0x0) returned 1 [0179.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.649] CloseHandle (hObject=0x1ec) returned 1 [0179.649] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.649] SetEndOfFile (hFile=0x1dc) returned 1 [0179.649] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll.vhd")) returned 1 [0179.650] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0179.650] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0179.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.658] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.668] CloseHandle (hObject=0x1ec) returned 1 [0179.668] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.668] SetEndOfFile (hFile=0x1dc) returned 1 [0179.669] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-string-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-string-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-string-l1-1-0.dll.vhd")) returned 1 [0179.670] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0179.671] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.688] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.688] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.688] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0179.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0179.688] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.688] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.689] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.689] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.689] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.689] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10c0, lpOverlapped=0x0) returned 1 [0179.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10c0, lpOverlapped=0x0) returned 1 [0179.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.701] CloseHandle (hObject=0x1ec) returned 1 [0179.701] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.701] SetEndOfFile (hFile=0x1dc) returned 1 [0179.702] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-1-0.dll.vhd")) returned 1 [0179.703] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0179.703] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.711] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.715] CloseHandle (hObject=0x1ec) returned 1 [0179.715] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.715] SetEndOfFile (hFile=0x1dc) returned 1 [0179.716] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-2-0.dll.vhd")) returned 1 [0179.716] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0179.716] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-sysinfo-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.727] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0179.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0179.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.735] CloseHandle (hObject=0x1ec) returned 1 [0179.735] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.735] SetEndOfFile (hFile=0x1dc) returned 1 [0179.735] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-sysinfo-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-sysinfo-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-sysinfo-l1-1-0.dll.vhd")) returned 1 [0179.736] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa93fe, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafa93fe, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0179.736] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0179.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0179.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0179.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0179.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.745] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.751] CloseHandle (hObject=0x1ec) returned 1 [0179.751] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.751] SetEndOfFile (hFile=0x1dc) returned 1 [0179.751] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-timezone-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-timezone-l1-1-0.dll.vhd")) returned 1 [0179.752] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0179.752] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-util-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0179.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0179.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.760] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.761] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.761] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.761] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.761] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0179.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0179.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.768] CloseHandle (hObject=0x1ec) returned 1 [0179.769] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.769] SetEndOfFile (hFile=0x1dc) returned 1 [0179.769] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-util-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-util-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-util-l1-1-0.dll.vhd")) returned 1 [0179.770] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0179.770] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0179.779] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0179.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.780] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0179.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0179.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.786] CloseHandle (hObject=0x1ec) returned 1 [0179.786] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.786] SetEndOfFile (hFile=0x1dc) returned 1 [0179.786] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-conio-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-conio-l1-1-0.dll.vhd")) returned 1 [0179.787] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0179.787] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0179.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a80 [0179.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a80 | out: hHeap=0x2830000) returned 1 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.799] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18c0, lpOverlapped=0x0) returned 1 [0179.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18c0, lpOverlapped=0x0) returned 1 [0179.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.805] CloseHandle (hObject=0x1ec) returned 1 [0179.805] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.805] SetEndOfFile (hFile=0x1dc) returned 1 [0179.805] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-convert-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-convert-l1-1-0.dll.vhd")) returned 1 [0179.806] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0179.806] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0179.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0179.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.816] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.831] CloseHandle (hObject=0x1ec) returned 1 [0179.831] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.831] SetEndOfFile (hFile=0x1dc) returned 1 [0179.831] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-environment-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-environment-l1-1-0.dll.vhd")) returned 1 [0179.834] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0179.834] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0179.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0179.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0b10 [0179.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0b10 | out: hHeap=0x2830000) returned 1 [0179.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.845] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10c0, lpOverlapped=0x0) returned 1 [0179.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10c0, lpOverlapped=0x0) returned 1 [0179.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.851] CloseHandle (hObject=0x1ec) returned 1 [0179.851] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.851] SetEndOfFile (hFile=0x1dc) returned 1 [0179.851] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-filesystem-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-filesystem-l1-1-0.dll.vhd")) returned 1 [0179.852] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0179.852] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0179.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0179.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0179.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0179.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.880] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.880] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.880] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.880] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.881] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.881] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.881] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.881] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.915] CloseHandle (hObject=0x1ec) returned 1 [0179.915] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.915] SetEndOfFile (hFile=0x1dc) returned 1 [0179.937] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-heap-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-heap-l1-1-0.dll.vhd")) returned 1 [0179.938] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0179.938] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0179.947] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0179.947] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.947] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.947] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.947] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.947] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0179.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0179.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0179.956] CloseHandle (hObject=0x1ec) returned 1 [0179.956] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.956] SetEndOfFile (hFile=0x1dc) returned 1 [0179.957] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-locale-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-locale-l1-1-0.dll.vhd")) returned 1 [0179.958] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0179.958] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0179.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0179.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0179.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0179.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0179.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0179.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0179.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0179.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0179.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0179.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0179.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.968] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0179.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0179.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0179.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0179.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0179.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0179.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0179.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0179.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0179.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0179.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0179.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0180.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0180.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.059] CloseHandle (hObject=0x1ec) returned 1 [0180.059] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.059] SetEndOfFile (hFile=0x1dc) returned 1 [0180.060] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-math-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-math-l1-1-0.dll.vhd")) returned 1 [0180.061] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x66b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0180.061] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.074] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ff0 [0180.075] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ff0 | out: hHeap=0x2830000) returned 1 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0180.075] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.075] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.075] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.075] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.075] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.075] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.076] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.076] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6b8, lpOverlapped=0x0) returned 1 [0180.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff948, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0180.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.082] CloseHandle (hObject=0x1ec) returned 1 [0180.082] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.082] SetEndOfFile (hFile=0x1dc) returned 1 [0180.083] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-multibyte-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-multibyte-l1-1-0.dll.vhd")) returned 1 [0180.083] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0180.083] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0180.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0180.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.096] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14c0, lpOverlapped=0x0) returned 1 [0180.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14c0, lpOverlapped=0x0) returned 1 [0180.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.110] CloseHandle (hObject=0x1ec) returned 1 [0180.111] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.111] SetEndOfFile (hFile=0x1dc) returned 1 [0180.111] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-private-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-private-l1-1-0.dll.vhd")) returned 1 [0180.112] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0180.112] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.122] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.122] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.122] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.123] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.123] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.123] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.123] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0180.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0180.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.133] CloseHandle (hObject=0x1ec) returned 1 [0180.133] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.134] SetEndOfFile (hFile=0x1dc) returned 1 [0180.134] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-process-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-process-l1-1-0.dll.vhd")) returned 1 [0180.135] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0180.135] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0180.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0180.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.145] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.146] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.146] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ac0, lpOverlapped=0x0) returned 1 [0180.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ac0, lpOverlapped=0x0) returned 1 [0180.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.168] CloseHandle (hObject=0x1ec) returned 1 [0180.168] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.168] SetEndOfFile (hFile=0x1dc) returned 1 [0180.169] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-runtime-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-runtime-l1-1-0.dll.vhd")) returned 1 [0180.169] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0180.169] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0180.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0180.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0180.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0180.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.199] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc0, lpOverlapped=0x0) returned 1 [0180.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc0, lpOverlapped=0x0) returned 1 [0180.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.258] CloseHandle (hObject=0x1ec) returned 1 [0180.258] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.258] SetEndOfFile (hFile=0x1dc) returned 1 [0180.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-stdio-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-stdio-l1-1-0.dll.vhd")) returned 1 [0180.260] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0180.260] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0180.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0180.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0180.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0180.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.270] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.271] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.271] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.271] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.271] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.271] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc0, lpOverlapped=0x0) returned 1 [0180.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc0, lpOverlapped=0x0) returned 1 [0180.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.276] CloseHandle (hObject=0x1ec) returned 1 [0180.276] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.276] SetEndOfFile (hFile=0x1dc) returned 1 [0180.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-string-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-string-l1-1-0.dll.vhd")) returned 1 [0180.278] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0180.278] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.287] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.289] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c0, lpOverlapped=0x0) returned 1 [0180.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12c0, lpOverlapped=0x0) returned 1 [0180.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.351] CloseHandle (hObject=0x1ec) returned 1 [0180.351] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.351] SetEndOfFile (hFile=0x1dc) returned 1 [0180.351] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-time-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-time-l1-1-0.dll.vhd")) returned 1 [0180.356] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0b44c9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0b44c9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0180.357] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0180.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0bd0 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0bd0 | out: hHeap=0x2830000) returned 1 [0180.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.368] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.370] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0180.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0180.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.373] CloseHandle (hObject=0x1ec) returned 1 [0180.373] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.373] SetEndOfFile (hFile=0x1dc) returned 1 [0180.374] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-utility-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-utility-l1-1-0.dll.vhd")) returned 1 [0180.375] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0da723, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf2260280, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0180.375] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files\\mozilla firefox\\application.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde14e8 [0180.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1660 [0180.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0180.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0180.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17c8 [0180.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0180.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17c8 | out: hHeap=0x2830000) returned 1 [0180.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0180.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.388] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1660 [0180.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde16b0 [0180.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde18c0 [0180.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16b0 | out: hHeap=0x2830000) returned 1 [0180.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18c0 | out: hHeap=0x2830000) returned 1 [0180.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.389] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1660 [0180.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1660 | out: hHeap=0x2830000) returned 1 [0180.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde14e8 | out: hHeap=0x2830000) returned 1 [0180.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2ce, lpOverlapped=0x0) returned 1 [0180.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2d0, lpOverlapped=0x0) returned 1 [0180.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.391] CloseHandle (hObject=0x1ec) returned 1 [0180.391] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.391] SetEndOfFile (hFile=0x1dc) returned 1 [0180.391] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files\\mozilla firefox\\application.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\application.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\application.ini.vhd")) returned 1 [0180.392] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0180.392] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0bd0 [0180.392] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0xde14e8 [0180.392] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0180.392] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec059fbc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec059fbc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x74b3bf80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2edd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0180.393] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.483] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1548 [0180.483] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde16c0 [0180.483] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0180.483] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0180.483] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1828 [0180.483] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c00 [0180.483] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.483] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1828 | out: hHeap=0x2830000) returned 1 [0180.483] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c00 | out: hHeap=0x2830000) returned 1 [0180.483] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde16c0 [0180.483] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.484] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.484] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde16c0 [0180.484] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1710 [0180.484] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1920 [0180.484] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0180.484] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1920 | out: hHeap=0x2830000) returned 1 [0180.485] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.485] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde16c0 [0180.485] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.485] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1548 | out: hHeap=0x2830000) returned 1 [0180.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdd0, lpOverlapped=0x0) returned 1 [0180.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xdd0, lpOverlapped=0x0) returned 1 [0180.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.594] CloseHandle (hObject=0x1ec) returned 1 [0180.595] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.595] SetEndOfFile (hFile=0x1dc) returned 1 [0180.595] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.exe.vhd")) returned 1 [0180.596] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x690ecb80, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0180.596] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1548 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde16c0 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836cd8 [0180.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836cd8 | out: hHeap=0x2830000) returned 1 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1828 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c00 [0180.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1828 | out: hHeap=0x2830000) returned 1 [0180.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c00 | out: hHeap=0x2830000) returned 1 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde16c0 [0180.614] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.614] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.614] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde16c0 [0180.615] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1710 [0180.615] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1920 [0180.615] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0180.615] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1920 | out: hHeap=0x2830000) returned 1 [0180.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde16c0 [0180.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.616] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1548 | out: hHeap=0x2830000) returned 1 [0180.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfa3, lpOverlapped=0x0) returned 1 [0180.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff05d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfb0, lpOverlapped=0x0) returned 1 [0180.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0180.618] CloseHandle (hObject=0x1ec) returned 1 [0180.618] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.618] SetEndOfFile (hFile=0x1dc) returned 1 [0180.618] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.ini.vhd")) returned 1 [0180.619] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0180.619] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll" (normalized: "c:\\program files\\mozilla firefox\\d3dcompiler_47.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0180.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0180.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1548 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde16c0 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0180.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1828 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c00 [0180.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1828 | out: hHeap=0x2830000) returned 1 [0180.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c00 | out: hHeap=0x2830000) returned 1 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde16c0 [0180.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.654] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde16c0 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1710 [0180.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1920 [0180.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1710 | out: hHeap=0x2830000) returned 1 [0180.655] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1920 | out: hHeap=0x2830000) returned 1 [0180.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde16c0 [0180.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde16c0 | out: hHeap=0x2830000) returned 1 [0180.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1548 | out: hHeap=0x2830000) returned 1 [0180.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0180.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0180.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0180.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0180.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0181.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0181.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.340] CloseHandle (hObject=0x1ec) returned 1 [0182.340] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.340] SetEndOfFile (hFile=0x1dc) returned 1 [0182.379] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll" (normalized: "c:\\program files\\mozilla firefox\\d3dcompiler_47.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\d3dcompiler_47.dll.vhd")) returned 1 [0182.381] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0182.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0b10 [0182.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1548 [0182.381] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0182.381] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files\\mozilla firefox\\dependentlibs.list"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde15a8 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1720 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0182.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1888 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0182.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1720 | out: hHeap=0x2830000) returned 1 [0182.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1888 | out: hHeap=0x2830000) returned 1 [0182.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1720 [0182.403] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1720 | out: hHeap=0x2830000) returned 1 [0182.403] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.403] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1720 [0182.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1770 [0182.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1980 [0182.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1770 | out: hHeap=0x2830000) returned 1 [0182.404] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1980 | out: hHeap=0x2830000) returned 1 [0182.405] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1720 | out: hHeap=0x2830000) returned 1 [0182.405] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1720 [0182.405] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1720 | out: hHeap=0x2830000) returned 1 [0182.405] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde15a8 | out: hHeap=0x2830000) returned 1 [0182.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ee, lpOverlapped=0x0) returned 1 [0182.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f0, lpOverlapped=0x0) returned 1 [0182.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.408] CloseHandle (hObject=0x1ec) returned 1 [0182.408] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.408] SetEndOfFile (hFile=0x1dc) returned 1 [0182.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files\\mozilla firefox\\dependentlibs.list"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\dependentlibs.list.vhd" (normalized: "c:\\program files\\mozilla firefox\\dependentlibs.list.vhd")) returned 1 [0182.409] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0182.411] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c00 [0182.411] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde15a8 [0182.411] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0182.411] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.421] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1610 [0182.421] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1788 [0182.421] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0182.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0182.421] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde18f0 [0182.421] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a80 [0182.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18f0 | out: hHeap=0x2830000) returned 1 [0182.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a80 | out: hHeap=0x2830000) returned 1 [0182.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.422] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.422] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1788 [0182.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde17d8 [0182.422] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde19e8 [0182.422] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17d8 | out: hHeap=0x2830000) returned 1 [0182.422] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde19e8 | out: hHeap=0x2830000) returned 1 [0182.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.424] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.424] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1610 | out: hHeap=0x2830000) returned 1 [0182.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdd0, lpOverlapped=0x0) returned 1 [0182.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xdd0, lpOverlapped=0x0) returned 1 [0182.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.473] CloseHandle (hObject=0x1ec) returned 1 [0182.473] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.473] SetEndOfFile (hFile=0x1dc) returned 1 [0182.477] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe.vhd")) returned 1 [0182.478] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0f2926, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x25679200, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="firefox.VisualElementsManifest.xml", cAlternateFileName="FIREFO~1.XML")) returned 1 [0182.478] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.VisualElementsManifest.xml" (normalized: "c:\\program files\\mozilla firefox\\firefox.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1610 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1788 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0182.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde18f0 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c10 [0182.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18f0 | out: hHeap=0x2830000) returned 1 [0182.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c10 | out: hHeap=0x2830000) returned 1 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.497] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1788 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde17d8 [0182.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde19e8 [0182.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17d8 | out: hHeap=0x2830000) returned 1 [0182.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde19e8 | out: hHeap=0x2830000) returned 1 [0182.499] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.499] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.499] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.499] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1610 | out: hHeap=0x2830000) returned 1 [0182.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x158, lpOverlapped=0x0) returned 1 [0182.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x160, lpOverlapped=0x0) returned 1 [0182.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.501] CloseHandle (hObject=0x1ec) returned 1 [0182.501] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.501] SetEndOfFile (hFile=0x1dc) returned 1 [0182.501] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\firefox.VisualElementsManifest.xml" (normalized: "c:\\program files\\mozilla firefox\\firefox.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\firefox.VisualElementsManifest.xml.vhd" (normalized: "c:\\program files\\mozilla firefox\\firefox.visualelementsmanifest.xml.vhd")) returned 1 [0182.502] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0182.502] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c10 [0182.502] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0x2836cd8 [0182.502] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0182.502] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files\\mozilla firefox\\freebl3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1610 [0182.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1788 [0182.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0182.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0182.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde18f0 [0182.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0182.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18f0 | out: hHeap=0x2830000) returned 1 [0182.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0182.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.513] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1788 [0182.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde17d8 [0182.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde19e8 [0182.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17d8 | out: hHeap=0x2830000) returned 1 [0182.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde19e8 | out: hHeap=0x2830000) returned 1 [0182.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1610 | out: hHeap=0x2830000) returned 1 [0182.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x383, lpOverlapped=0x0) returned 1 [0182.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x390, lpOverlapped=0x0) returned 1 [0182.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.515] CloseHandle (hObject=0x1ec) returned 1 [0182.515] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.515] SetEndOfFile (hFile=0x1dc) returned 1 [0182.515] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files\\mozilla firefox\\freebl3.chk"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.chk.vhd" (normalized: "c:\\program files\\mozilla firefox\\freebl3.chk.vhd")) returned 1 [0182.516] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0182.516] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files\\mozilla firefox\\freebl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1610 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1788 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0182.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde18f0 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c20 [0182.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde18f0 | out: hHeap=0x2830000) returned 1 [0182.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c20 | out: hHeap=0x2830000) returned 1 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.528] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1788 [0182.529] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde17d8 [0182.529] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde19e8 [0182.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17d8 | out: hHeap=0x2830000) returned 1 [0182.529] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde19e8 | out: hHeap=0x2830000) returned 1 [0182.530] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.530] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1788 [0182.530] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1788 | out: hHeap=0x2830000) returned 1 [0182.530] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1610 | out: hHeap=0x2830000) returned 1 [0182.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9d0, lpOverlapped=0x0) returned 1 [0182.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x9d0, lpOverlapped=0x0) returned 1 [0182.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.557] CloseHandle (hObject=0x1ec) returned 1 [0182.557] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.557] SetEndOfFile (hFile=0x1dc) returned 1 [0182.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files\\mozilla firefox\\freebl3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\freebl3.dll.vhd")) returned 1 [0182.569] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gmp-clearkey", cAlternateFileName="GMP-CL~1")) returned 1 [0182.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c20 [0182.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde1610 [0182.569] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1 [0182.569] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\IA2Marshal.dll" (normalized: "c:\\program files\\mozilla firefox\\ia2marshal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0182.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0182.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0182.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0182.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0182.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0182.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0182.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0182.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.596] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0182.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0182.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0182.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0182.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0182.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.597] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0182.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19d0, lpOverlapped=0x0) returned 1 [0182.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19d0, lpOverlapped=0x0) returned 1 [0182.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.626] CloseHandle (hObject=0x1ec) returned 1 [0182.627] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.627] SetEndOfFile (hFile=0x1dc) returned 1 [0182.627] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\IA2Marshal.dll" (normalized: "c:\\program files\\mozilla firefox\\ia2marshal.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\IA2Marshal.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\ia2marshal.dll.vhd")) returned 1 [0182.627] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cbc491, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xf7d369cb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7c77d82, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7492, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0182.627] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\install.log" (normalized: "c:\\program files\\mozilla firefox\\install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ad0 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ad0 | out: hHeap=0x2830000) returned 1 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.636] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0182.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0182.636] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0182.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0182.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1492, lpOverlapped=0x0) returned 1 [0182.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb6e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14a0, lpOverlapped=0x0) returned 1 [0182.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.641] CloseHandle (hObject=0x1ec) returned 1 [0182.642] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.642] SetEndOfFile (hFile=0x1dc) returned 1 [0182.642] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\install.log" (normalized: "c:\\program files\\mozilla firefox\\install.log"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\install.log.vhd" (normalized: "c:\\program files\\mozilla firefox\\install.log.vhd")) returned 1 [0182.642] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x79787380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd3d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lgpllibs.dll", cAlternateFileName="")) returned 1 [0182.642] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll" (normalized: "c:\\program files\\mozilla firefox\\lgpllibs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0182.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0182.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0182.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.650] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0182.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0182.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0182.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0182.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0182.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.652] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0182.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x13d0, lpOverlapped=0x0) returned 1 [0182.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x13d0, lpOverlapped=0x0) returned 1 [0182.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.656] CloseHandle (hObject=0x1ec) returned 1 [0182.657] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.657] SetEndOfFile (hFile=0x1dc) returned 1 [0182.657] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll" (normalized: "c:\\program files\\mozilla firefox\\lgpllibs.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\lgpllibs.dll.vhd")) returned 1 [0182.658] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7aa9a080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x69d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0182.658] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files\\mozilla firefox\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.681] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0182.681] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0182.681] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0182.681] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0182.681] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0182.681] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0182.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0182.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0182.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.682] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0182.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0182.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0182.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0182.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0182.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0182.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9d0, lpOverlapped=0x0) returned 1 [0182.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x9d0, lpOverlapped=0x0) returned 1 [0182.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.688] CloseHandle (hObject=0x1ec) returned 1 [0182.688] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.688] SetEndOfFile (hFile=0x1dc) returned 1 [0182.688] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files\\mozilla firefox\\libegl.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\libEGL.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\libegl.dll.vhd")) returned 1 [0182.689] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7c736400, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1d5bd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0182.689] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files\\mozilla firefox\\libglesv2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0182.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0182.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0182.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0182.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.697] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0182.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0182.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0182.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0182.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.698] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0182.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0182.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0182.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0182.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0182.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1bd0, lpOverlapped=0x0) returned 1 [0182.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1bd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1bd0, lpOverlapped=0x0) returned 1 [0182.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0182.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0182.975] CloseHandle (hObject=0x1ec) returned 1 [0182.975] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.975] SetEndOfFile (hFile=0x1dc) returned 1 [0183.004] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files\\mozilla firefox\\libglesv2.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\libglesv2.dll.vhd")) returned 1 [0183.005] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0183.005] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0183.031] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0183.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0183.031] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.031] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.031] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0183.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.032] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.032] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.032] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.032] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.032] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.032] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.032] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x15d0, lpOverlapped=0x0) returned 1 [0183.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffea30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x15d0, lpOverlapped=0x0) returned 1 [0183.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.099] CloseHandle (hObject=0x1ec) returned 1 [0183.099] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.099] SetEndOfFile (hFile=0x1dc) returned 1 [0183.099] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice.exe.vhd")) returned 1 [0183.100] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec18b2c8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec18b2c8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7ed5be00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x265a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0183.100] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.110] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.110] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.110] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0183.110] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0183.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a80 [0183.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a80 | out: hHeap=0x2830000) returned 1 [0183.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.111] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.113] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.113] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.113] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5a8, lpOverlapped=0x0) returned 1 [0183.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5b0, lpOverlapped=0x0) returned 1 [0183.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.129] CloseHandle (hObject=0x1ec) returned 1 [0183.129] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.129] SetEndOfFile (hFile=0x1dc) returned 1 [0183.129] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice_installer.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice_installer.exe.vhd")) returned 1 [0183.130] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8006eb00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x963d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="minidump-analyzer.exe", cAlternateFileName="MINIDU~1.EXE")) returned 1 [0183.130] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe" (normalized: "c:\\program files\\mozilla firefox\\minidump-analyzer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0183.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0183.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0183.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0183.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.141] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3d0, lpOverlapped=0x0) returned 1 [0183.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3d0, lpOverlapped=0x0) returned 1 [0183.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.193] CloseHandle (hObject=0x1ec) returned 1 [0183.194] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.194] SetEndOfFile (hFile=0x1dc) returned 1 [0183.283] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe" (normalized: "c:\\program files\\mozilla firefox\\minidump-analyzer.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\minidump-analyzer.exe.vhd")) returned 1 [0183.284] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x81d0ae80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x176bd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mozavcodec.dll", cAlternateFileName="MOZAVC~1.DLL")) returned 1 [0183.284] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavcodec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0183.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0183.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0183.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0183.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.296] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.376] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.376] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.377] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbd0, lpOverlapped=0x0) returned 1 [0183.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xbd0, lpOverlapped=0x0) returned 1 [0183.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.579] CloseHandle (hObject=0x1ec) returned 1 [0183.580] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.580] SetEndOfFile (hFile=0x1dc) returned 1 [0183.606] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavcodec.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\mozavcodec.dll.vhd")) returned 1 [0183.607] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8301db80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x299d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mozavutil.dll", cAlternateFileName="MOZAVU~1.DLL")) returned 1 [0183.607] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\mozavutil.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavutil.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0183.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0183.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0183.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0183.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.623] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19d0, lpOverlapped=0x0) returned 1 [0183.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19d0, lpOverlapped=0x0) returned 1 [0183.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.649] CloseHandle (hObject=0x1ec) returned 1 [0183.649] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.650] SetEndOfFile (hFile=0x1dc) returned 1 [0183.687] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\mozavutil.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavutil.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\mozavutil.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\mozavutil.dll.vhd")) returned 1 [0183.689] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x84330880, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x269d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0183.689] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files\\mozilla firefox\\mozglue.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.708] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9d0, lpOverlapped=0x0) returned 1 [0183.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x9d0, lpOverlapped=0x0) returned 1 [0183.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.720] CloseHandle (hObject=0x1ec) returned 1 [0183.720] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.720] SetEndOfFile (hFile=0x1dc) returned 1 [0183.721] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files\\mozilla firefox\\mozglue.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\mozglue.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\mozglue.dll.vhd")) returned 1 [0183.721] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a940, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0183.721] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\msvcp140.dll" (normalized: "c:\\program files\\mozilla firefox\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.734] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ff0 [0183.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ff0 | out: hHeap=0x2830000) returned 1 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ad0 [0183.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ad0 | out: hHeap=0x2830000) returned 1 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.735] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.737] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.737] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x940, lpOverlapped=0x0) returned 1 [0183.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x940, lpOverlapped=0x0) returned 1 [0183.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0183.786] CloseHandle (hObject=0x1ec) returned 1 [0183.786] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.786] SetEndOfFile (hFile=0x1dc) returned 1 [0183.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\msvcp140.dll" (normalized: "c:\\program files\\mozilla firefox\\msvcp140.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\msvcp140.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\msvcp140.dll.vhd")) returned 1 [0183.801] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x85fccc00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x172fd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0183.801] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files\\mozilla firefox\\nss3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0183.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0183.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0183.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0183.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0183.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0183.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0183.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.816] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0183.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0183.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0183.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0183.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0183.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0183.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0183.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.827] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0183.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0183.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfd0, lpOverlapped=0x0) returned 1 [0184.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff030, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfd0, lpOverlapped=0x0) returned 1 [0184.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0184.026] CloseHandle (hObject=0x1ec) returned 1 [0184.026] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.026] SetEndOfFile (hFile=0x1dc) returned 1 [0184.050] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files\\mozilla firefox\\nss3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nss3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\nss3.dll.vhd")) returned 1 [0184.051] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x872df900, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x785d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0184.051] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files\\mozilla firefox\\nssckbi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0184.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0184.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0184.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0184.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0184.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0184.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0184.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0184.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0184.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.060] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0184.061] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0184.061] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0184.061] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0184.061] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0184.061] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0184.063] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.063] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.063] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.063] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0184.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5d0, lpOverlapped=0x0) returned 1 [0184.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5d0, lpOverlapped=0x0) returned 1 [0184.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0184.167] CloseHandle (hObject=0x1ec) returned 1 [0184.167] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.167] SetEndOfFile (hFile=0x1dc) returned 1 [0184.178] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files\\mozilla firefox\\nssckbi.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nssckbi.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\nssckbi.dll.vhd")) returned 1 [0184.179] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0184.179] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0184.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0184.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0184.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0184.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0184.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0184.191] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0184.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0184.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0184.191] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.191] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0184.191] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0184.191] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0184.191] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0184.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0184.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0184.192] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.192] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.192] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.192] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0184.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x383, lpOverlapped=0x0) returned 1 [0184.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x390, lpOverlapped=0x0) returned 1 [0184.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0184.193] CloseHandle (hObject=0x1ec) returned 1 [0184.193] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.193] SetEndOfFile (hFile=0x1dc) returned 1 [0184.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.chk"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.chk.vhd" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.chk.vhd")) returned 1 [0184.194] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1bfd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0184.194] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0184.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e38 [0184.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e38 | out: hHeap=0x2830000) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0184.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0184.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.206] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0184.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0184.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0184.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0184.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.207] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0184.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1fd0, lpOverlapped=0x0) returned 1 [0184.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe030, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1fd0, lpOverlapped=0x0) returned 1 [0184.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0184.216] CloseHandle (hObject=0x1ec) returned 1 [0184.216] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.217] SetEndOfFile (hFile=0x1dc) returned 1 [0184.227] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.dll.vhd")) returned 1 [0184.228] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec249eb7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec249eb7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1196618, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0184.228] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files\\mozilla firefox\\omni.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0184.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0184.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0184.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0184.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0184.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.245] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0184.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0184.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0184.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0184.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0184.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0184.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0184.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0184.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0184.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.817] CloseHandle (hObject=0x1ec) returned 1 [0185.817] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.818] SetEndOfFile (hFile=0x1dc) returned 1 [0185.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files\\mozilla firefox\\omni.ja"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\omni.ja.vhd" (normalized: "c:\\program files\\mozilla firefox\\omni.ja.vhd")) returned 1 [0185.831] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec270127, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec270127, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x89905300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pingsender.exe", cAlternateFileName="PINGSE~1.EXE")) returned 1 [0185.831] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\pingsender.exe" (normalized: "c:\\program files\\mozilla firefox\\pingsender.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0185.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0185.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0185.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0185.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0185.843] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0185.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0185.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0185.843] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.843] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0185.843] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0185.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0185.843] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.844] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0185.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0185.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0185.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0185.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0185.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0185.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0185.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0185.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x17d0, lpOverlapped=0x0) returned 1 [0185.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe830, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x17d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x17d0, lpOverlapped=0x0) returned 1 [0185.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0185.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0185.852] CloseHandle (hObject=0x1ec) returned 1 [0185.852] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.852] SetEndOfFile (hFile=0x1dc) returned 1 [0185.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\pingsender.exe" (normalized: "c:\\program files\\mozilla firefox\\pingsender.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\pingsender.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\pingsender.exe.vhd")) returned 1 [0185.854] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0185.854] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files\\mozilla firefox\\platform.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0185.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0185.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ad0 [0185.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0185.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ad0 | out: hHeap=0x2830000) returned 1 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0185.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.885] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0185.885] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0185.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0185.886] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0185.887] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.887] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0185.887] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.887] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0185.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa6, lpOverlapped=0x0) returned 1 [0185.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb0, lpOverlapped=0x0) returned 1 [0185.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0185.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0185.889] CloseHandle (hObject=0x1ec) returned 1 [0185.889] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.889] SetEndOfFile (hFile=0x1dc) returned 1 [0185.901] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files\\mozilla firefox\\platform.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\platform.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\platform.ini.vhd")) returned 1 [0185.901] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8ac18000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x18bd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0185.902] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0185.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0185.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0185.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0185.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0185.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0185.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ad0 [0185.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0185.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ad0 | out: hHeap=0x2830000) returned 1 [0185.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0185.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.928] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0185.929] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0185.929] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0185.929] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0185.929] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0185.929] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0185.930] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.930] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0185.930] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0185.930] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0185.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0185.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0185.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbd0, lpOverlapped=0x0) returned 1 [0185.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xbd0, lpOverlapped=0x0) returned 1 [0185.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0185.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0185.972] CloseHandle (hObject=0x1ec) returned 1 [0185.972] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.972] SetEndOfFile (hFile=0x1dc) returned 1 [0185.972] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-container.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\plugin-container.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\plugin-container.exe.vhd")) returned 1 [0185.973] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec2bc5f9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec2bc5f9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8b5a1680, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x8dd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0185.973] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-hang-ui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0185.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0185.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0185.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0186.005] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0186.005] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.005] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.005] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.005] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.005] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.005] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.006] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.006] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdd0, lpOverlapped=0x0) returned 1 [0186.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xdd0, lpOverlapped=0x0) returned 1 [0186.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.074] CloseHandle (hObject=0x1ec) returned 1 [0186.074] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.074] SetEndOfFile (hFile=0x1dc) returned 1 [0186.075] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-hang-ui.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\plugin-hang-ui.exe.vhd")) returned 1 [0186.075] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xbc628460, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0186.076] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files\\mozilla firefox\\precomplete"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0186.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0186.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.114] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.115] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.115] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.115] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.115] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfc7, lpOverlapped=0x0) returned 1 [0186.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff039, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfd0, lpOverlapped=0x0) returned 1 [0186.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.117] CloseHandle (hObject=0x1ec) returned 1 [0186.117] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.117] SetEndOfFile (hFile=0x1dc) returned 1 [0186.117] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files\\mozilla firefox\\precomplete"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\precomplete.vhd" (normalized: "c:\\program files\\mozilla firefox\\precomplete.vhd")) returned 1 [0186.118] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8c8b4380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x49d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qipcap64.dll", cAlternateFileName="")) returned 1 [0186.118] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\qipcap64.dll" (normalized: "c:\\program files\\mozilla firefox\\qipcap64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0186.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0186.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0af0 [0186.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0af0 | out: hHeap=0x2830000) returned 1 [0186.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.166] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.166] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.166] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.166] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9d0, lpOverlapped=0x0) returned 1 [0186.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x9d0, lpOverlapped=0x0) returned 1 [0186.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.171] CloseHandle (hObject=0x1ec) returned 1 [0186.171] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.171] SetEndOfFile (hFile=0x1dc) returned 1 [0186.171] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\qipcap64.dll" (normalized: "c:\\program files\\mozilla firefox\\qipcap64.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\qipcap64.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\qipcap64.dll.vhd")) returned 1 [0186.172] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xec53900, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0186.172] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files\\mozilla firefox\\removed-files"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.182] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x286, lpOverlapped=0x0) returned 1 [0186.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x290, lpOverlapped=0x0) returned 1 [0186.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.184] CloseHandle (hObject=0x1ec) returned 1 [0186.185] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.185] SetEndOfFile (hFile=0x1dc) returned 1 [0186.185] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files\\mozilla firefox\\removed-files"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\removed-files.vhd" (normalized: "c:\\program files\\mozilla firefox\\removed-files.vhd")) returned 1 [0186.186] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0186.186] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files\\mozilla firefox\\softokn3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.196] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.196] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.197] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.197] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.198] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.198] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x383, lpOverlapped=0x0) returned 1 [0186.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x390, lpOverlapped=0x0) returned 1 [0186.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.199] CloseHandle (hObject=0x1ec) returned 1 [0186.200] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.200] SetEndOfFile (hFile=0x1dc) returned 1 [0186.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files\\mozilla firefox\\softokn3.chk"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.chk.vhd" (normalized: "c:\\program files\\mozilla firefox\\softokn3.chk.vhd")) returned 1 [0186.203] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0186.203] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files\\mozilla firefox\\softokn3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836e90 [0186.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836e90 | out: hHeap=0x2830000) returned 1 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c30 [0186.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c30 | out: hHeap=0x2830000) returned 1 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.291] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.291] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.292] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.292] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.293] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.293] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.293] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.293] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x15d0, lpOverlapped=0x0) returned 1 [0186.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffea30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x15d0, lpOverlapped=0x0) returned 1 [0186.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.316] CloseHandle (hObject=0x1ec) returned 1 [0186.316] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.316] SetEndOfFile (hFile=0x1dc) returned 1 [0186.316] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files\\mozilla firefox\\softokn3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\softokn3.dll.vhd")) returned 1 [0186.317] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xf36c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0186.317] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll" (normalized: "c:\\program files\\mozilla firefox\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1678 [0186.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde17f0 [0186.366] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0186.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0186.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1958 [0186.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0186.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1958 | out: hHeap=0x2830000) returned 1 [0186.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0186.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.375] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.375] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde17f0 [0186.375] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde1840 [0186.375] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde1a50 [0186.375] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1840 | out: hHeap=0x2830000) returned 1 [0186.375] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1a50 | out: hHeap=0x2830000) returned 1 [0186.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.377] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde17f0 [0186.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde17f0 | out: hHeap=0x2830000) returned 1 [0186.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1678 | out: hHeap=0x2830000) returned 1 [0186.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16c0, lpOverlapped=0x0) returned 1 [0186.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16c0, lpOverlapped=0x0) returned 1 [0186.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.776] CloseHandle (hObject=0x1ec) returned 1 [0186.776] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.776] SetEndOfFile (hFile=0x1dc) returned 1 [0186.776] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll" (normalized: "c:\\program files\\mozilla firefox\\ucrtbase.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\ucrtbase.dll.vhd")) returned 1 [0186.777] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0186.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c30 [0186.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde19a0 [0186.777] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0186.777] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files\\mozilla firefox\\update-settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1e80 [0186.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1ff8 [0186.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0186.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0186.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2160 [0186.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0186.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2160 | out: hHeap=0x2830000) returned 1 [0186.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0186.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0186.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.785] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1ff8 [0186.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2048 [0186.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2258 [0186.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2048 | out: hHeap=0x2830000) returned 1 [0186.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2258 | out: hHeap=0x2830000) returned 1 [0186.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0186.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1e80 | out: hHeap=0x2830000) returned 1 [0186.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x84, lpOverlapped=0x0) returned 1 [0186.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x90, lpOverlapped=0x0) returned 1 [0186.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.787] CloseHandle (hObject=0x1ec) returned 1 [0186.787] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.788] SetEndOfFile (hFile=0x1dc) returned 1 [0186.788] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files\\mozilla firefox\\update-settings.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\update-settings.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\update-settings.ini.vhd")) returned 1 [0186.788] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8eed9d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x579d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0186.788] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files\\mozilla firefox\\updater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0186.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1e80 [0186.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1ff8 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836f40 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836f40 | out: hHeap=0x2830000) returned 1 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2160 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2160 | out: hHeap=0x2830000) returned 1 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.797] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1ff8 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2048 [0186.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2258 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2048 | out: hHeap=0x2830000) returned 1 [0186.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2258 | out: hHeap=0x2830000) returned 1 [0186.933] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.933] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0186.933] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0186.933] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1e80 | out: hHeap=0x2830000) returned 1 [0186.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0186.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0186.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19d0, lpOverlapped=0x0) returned 1 [0186.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19d0, lpOverlapped=0x0) returned 1 [0186.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0186.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0186.982] CloseHandle (hObject=0x1ec) returned 1 [0186.982] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.982] SetEndOfFile (hFile=0x1dc) returned 1 [0186.983] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files\\mozilla firefox\\updater.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\updater.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\updater.exe.vhd")) returned 1 [0186.983] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0186.984] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files\\mozilla firefox\\updater.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0186.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0187.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1e80 [0187.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1ff8 [0187.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0187.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2160 [0187.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0aa0 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2160 | out: hHeap=0x2830000) returned 1 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0aa0 | out: hHeap=0x2830000) returned 1 [0187.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.161] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0187.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1ff8 [0187.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2048 [0187.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2258 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2048 | out: hHeap=0x2830000) returned 1 [0187.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2258 | out: hHeap=0x2830000) returned 1 [0187.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.163] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0187.163] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.163] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1e80 | out: hHeap=0x2830000) returned 1 [0187.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4dd, lpOverlapped=0x0) returned 1 [0187.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4e0, lpOverlapped=0x0) returned 1 [0187.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0187.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0187.166] CloseHandle (hObject=0x1ec) returned 1 [0187.166] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.166] SetEndOfFile (hFile=0x1dc) returned 1 [0187.167] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files\\mozilla firefox\\updater.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\updater.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\updater.ini.vhd")) returned 1 [0187.170] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x15750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0187.170] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll" (normalized: "c:\\program files\\mozilla firefox\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0187.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.187] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1e80 [0187.187] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1ff8 [0187.187] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a70 [0187.187] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a70 | out: hHeap=0x2830000) returned 1 [0187.187] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2160 [0187.187] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0187.187] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.187] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2160 | out: hHeap=0x2830000) returned 1 [0187.187] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0187.187] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0187.187] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.187] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0187.188] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1ff8 [0187.188] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2048 [0187.188] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2258 [0187.188] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2048 | out: hHeap=0x2830000) returned 1 [0187.188] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2258 | out: hHeap=0x2830000) returned 1 [0187.189] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0187.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1e80 | out: hHeap=0x2830000) returned 1 [0187.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1750, lpOverlapped=0x0) returned 1 [0187.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1750, lpOverlapped=0x0) returned 1 [0187.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0187.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0187.403] CloseHandle (hObject=0x1ec) returned 1 [0187.403] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.403] SetEndOfFile (hFile=0x1dc) returned 1 [0187.475] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll" (normalized: "c:\\program files\\mozilla firefox\\vcruntime140.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\vcruntime140.dll.vhd")) returned 1 [0187.476] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0187.476] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files\\mozilla firefox\\xul.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0187.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0187.526] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1e80 [0187.526] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde1ff8 [0187.526] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0187.526] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0187.526] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2160 [0187.526] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a60 [0187.526] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.526] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2160 | out: hHeap=0x2830000) returned 1 [0187.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a60 | out: hHeap=0x2830000) returned 1 [0187.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0187.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.527] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0187.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde1ff8 [0187.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2048 [0187.527] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2258 [0187.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2048 | out: hHeap=0x2830000) returned 1 [0187.527] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2258 | out: hHeap=0x2830000) returned 1 [0187.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.528] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde1ff8 [0187.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ff8 | out: hHeap=0x2830000) returned 1 [0187.528] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1e80 | out: hHeap=0x2830000) returned 1 [0187.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0187.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.827] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0188.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0188.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0189.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0189.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0190.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0190.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0192.941] CloseHandle (hObject=0x1ec) returned 1 [0192.942] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.942] SetEndOfFile (hFile=0x1dc) returned 1 [0193.032] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files\\mozilla firefox\\xul.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\xul.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\xul.dll.vhd")) returned 1 [0193.034] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0193.034] FindClose (in: hFindFile=0xd24558 | out: hFindFile=0xd24558) returned 1 [0193.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office 15\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0193.035] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.035] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c1a3cb0, ftCreationTime.dwHighDateTime=0x1d59585, ftLastAccessTime.dwLowDateTime=0xeeb15be0, ftLastAccessTime.dwHighDateTime=0x1d57572, ftLastWriteTime.dwLowDateTime=0xeeb15be0, ftLastWriteTime.dwHighDateTime=0x1d57572, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="andrea.exe", cAlternateFileName="")) returned 1 [0193.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\andrea.exe" (normalized: "c:\\program files\\microsoft office 15\\andrea.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.035] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 1 [0193.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0a60 [0193.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde1e80 [0193.036] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92651640, ftCreationTime.dwHighDateTime=0x1d59bb2, ftLastAccessTime.dwLowDateTime=0x9a7bdc70, ftLastAccessTime.dwHighDateTime=0x1d580cc, ftLastWriteTime.dwLowDateTime=0x9a7bdc70, ftLastWriteTime.dwHighDateTime=0x1d580cc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0193.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\omnipos.exe" (normalized: "c:\\program files\\microsoft office 15\\omnipos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0193.036] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92651640, ftCreationTime.dwHighDateTime=0x1d59bb2, ftLastAccessTime.dwLowDateTime=0x9a7bdc70, ftLastAccessTime.dwHighDateTime=0x1d580cc, ftLastWriteTime.dwLowDateTime=0x9a7bdc70, ftLastWriteTime.dwHighDateTime=0x1d580cc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 0 [0193.036] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0193.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb6ccca0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6ccca0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0193.036] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb6ccca0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6ccca0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.036] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0193.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0193.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0193.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1ee8 [0193.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde2060 [0193.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836de0 [0193.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836de0 | out: hHeap=0x2830000) returned 1 [0193.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde21c8 [0193.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0ad0 [0193.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0193.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde21c8 | out: hHeap=0x2830000) returned 1 [0193.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0ad0 | out: hHeap=0x2830000) returned 1 [0193.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2060 [0193.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0193.113] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0193.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde2060 [0193.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde20b0 [0193.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde22c0 [0193.113] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde20b0 | out: hHeap=0x2830000) returned 1 [0193.113] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde22c0 | out: hHeap=0x2830000) returned 1 [0193.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0193.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2060 [0193.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0193.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ee8 | out: hHeap=0x2830000) returned 1 [0193.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0193.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0193.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.313] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0194.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0194.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0195.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0195.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0198.867] CloseHandle (hObject=0x1ec) returned 1 [0198.868] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0198.868] SetEndOfFile (hFile=0x1dc) returned 1 [0199.013] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.vhd" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.vhd")) returned 1 [0199.015] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37310ed0, ftCreationTime.dwHighDateTime=0x1d56897, ftLastAccessTime.dwLowDateTime=0x92edc900, ftLastAccessTime.dwHighDateTime=0x1d5d720, ftLastWriteTime.dwLowDateTime=0x92edc900, ftLastWriteTime.dwHighDateTime=0x1d5d720, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="clothes.exe", cAlternateFileName="")) returned 1 [0199.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\clothes.exe" (normalized: "c:\\program files\\microsoft office\\clothes.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.015] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0199.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0199.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0199.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0199.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0199.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde1ee8 [0199.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde2060 [0199.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0199.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0199.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde21c8 [0199.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0a80 [0199.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0199.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde21c8 | out: hHeap=0x2830000) returned 1 [0199.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0a80 | out: hHeap=0x2830000) returned 1 [0199.026] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2060 [0199.026] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0199.027] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0199.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde2060 [0199.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde20b0 [0199.027] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde22c0 [0199.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde20b0 | out: hHeap=0x2830000) returned 1 [0199.027] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde22c0 | out: hHeap=0x2830000) returned 1 [0199.028] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0199.028] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2060 [0199.028] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2060 | out: hHeap=0x2830000) returned 1 [0199.028] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde1ee8 | out: hHeap=0x2830000) returned 1 [0199.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x119, lpOverlapped=0x0) returned 1 [0199.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffee7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0199.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x120, lpOverlapped=0x0) returned 1 [0199.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0199.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0199.029] CloseHandle (hObject=0x1ec) returned 1 [0199.029] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0199.029] SetEndOfFile (hFile=0x1dc) returned 1 [0199.030] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.vhd" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.vhd")) returned 1 [0199.030] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0199.030] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0aa0 [0199.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde1a60 [0199.031] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0199.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0a80 [0199.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xde1ee8 [0199.031] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0199.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0ad0 [0199.031] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0x2836f40 [0199.031] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e3a5d0, ftCreationTime.dwHighDateTime=0x1d5ec38, ftLastAccessTime.dwLowDateTime=0xe354f440, ftLastAccessTime.dwHighDateTime=0x1d5e8c3, ftLastWriteTime.dwLowDateTime=0xe354f440, ftLastWriteTime.dwHighDateTime=0x1d5e8c3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0199.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\whatsapp.exe" (normalized: "c:\\program files\\microsoft office\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.031] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e3a5d0, ftCreationTime.dwHighDateTime=0x1d5ec38, ftLastAccessTime.dwLowDateTime=0xe354f440, ftLastAccessTime.dwHighDateTime=0x1d5e8c3, ftLastWriteTime.dwLowDateTime=0xe354f440, ftLastWriteTime.dwHighDateTime=0x1d5e8c3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 0 [0199.031] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0199.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0199.032] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xef549c58, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef549c58, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.032] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138a1f70, ftCreationTime.dwHighDateTime=0x1d5865c, ftLastAccessTime.dwLowDateTime=0x5ea079c0, ftLastAccessTime.dwHighDateTime=0x1d5efd7, ftLastWriteTime.dwLowDateTime=0x5ea079c0, ftLastWriteTime.dwHighDateTime=0x1d5efd7, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="foxmailincmail.exe", cAlternateFileName="FOXMAI~1.EXE")) returned 1 [0199.032] CreateFileW (lpFileName="C:\\Program Files\\Java\\foxmailincmail.exe" (normalized: "c:\\program files\\java\\foxmailincmail.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.032] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d0c670, ftCreationTime.dwHighDateTime=0x1d5b637, ftLastAccessTime.dwLowDateTime=0x1c7c4fe0, ftLastAccessTime.dwHighDateTime=0x1d5780b, ftLastWriteTime.dwLowDateTime=0x1c7c4fe0, ftLastWriteTime.dwHighDateTime=0x1d5780b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 1 [0199.032] CreateFileW (lpFileName="C:\\Program Files\\Java\\gmailnotifierpro.exe" (normalized: "c:\\program files\\java\\gmailnotifierpro.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.033] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0199.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0af0 [0199.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x46) returned 0xde1f58 [0199.033] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf96cac90, ftCreationTime.dwHighDateTime=0x1d58c0d, ftLastAccessTime.dwLowDateTime=0x2e1049f0, ftLastAccessTime.dwHighDateTime=0x1d5c79d, ftLastWriteTime.dwLowDateTime=0x2e1049f0, ftLastWriteTime.dwHighDateTime=0x1d5c79d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="societies-liked.exe", cAlternateFileName="SOCIET~1.EXE")) returned 1 [0199.033] CreateFileW (lpFileName="C:\\Program Files\\Java\\societies-liked.exe" (normalized: "c:\\program files\\java\\societies-liked.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.033] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40985f00, ftCreationTime.dwHighDateTime=0x1d5d818, ftLastAccessTime.dwLowDateTime=0xeab2e280, ftLastAccessTime.dwHighDateTime=0x1d5a811, ftLastWriteTime.dwLowDateTime=0xeab2e280, ftLastWriteTime.dwHighDateTime=0x1d5a811, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="washer.exe", cAlternateFileName="")) returned 1 [0199.033] CreateFileW (lpFileName="C:\\Program Files\\Java\\washer.exe" (normalized: "c:\\program files\\java\\washer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.033] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40985f00, ftCreationTime.dwHighDateTime=0x1d5d818, ftLastAccessTime.dwLowDateTime=0xeab2e280, ftLastAccessTime.dwHighDateTime=0x1d5a811, ftLastWriteTime.dwLowDateTime=0xeab2e280, ftLastWriteTime.dwHighDateTime=0x1d5a811, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="washer.exe", cAlternateFileName="")) returned 0 [0199.033] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0199.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb6a69a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6a69a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24458 [0199.034] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb6a69a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6a69a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.034] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e8ee60, ftCreationTime.dwHighDateTime=0x1d5b590, ftLastAccessTime.dwLowDateTime=0x528f5a90, ftLastAccessTime.dwHighDateTime=0x1d5bad3, ftLastWriteTime.dwLowDateTime=0x528f5a90, ftLastWriteTime.dwHighDateTime=0x1d5bad3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0199.034] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\barca.exe" (normalized: "c:\\program files\\internet explorer\\barca.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.034] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0cb0 [0199.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0xde1c40 [0199.034] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0199.034] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.075] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0199.075] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.075] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0199.075] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.110] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0199.110] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.111] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0199.111] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.197] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0199.197] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.387] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0199.387] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.387] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0199.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0db0 [0199.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1940 [0199.387] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0199.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d40 [0199.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1ac0 [0199.387] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405078b0, ftCreationTime.dwHighDateTime=0x1d594fd, ftLastAccessTime.dwLowDateTime=0x155b2e0, ftLastAccessTime.dwHighDateTime=0x1d5aa8a, ftLastWriteTime.dwLowDateTime=0x155b2e0, ftLastWriteTime.dwHighDateTime=0x1d5aa8a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0199.388] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\smartftp.exe" (normalized: "c:\\program files\\internet explorer\\smartftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.388] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0199.388] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.602] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0199.602] FindClose (in: hFindFile=0xd24458 | out: hFindFile=0xd24458) returned 1 [0199.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ef199b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ef199b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0199.603] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ef199b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ef199b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.603] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94547240, ftCreationTime.dwHighDateTime=0x1d5a5ba, ftLastAccessTime.dwLowDateTime=0x442046c0, ftLastAccessTime.dwHighDateTime=0x1d56bbb, ftLastWriteTime.dwLowDateTime=0x442046c0, ftLastWriteTime.dwHighDateTime=0x1d56bbb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="attending other.exe", cAlternateFileName="ATTEND~1.EXE")) returned 1 [0199.603] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\attending other.exe" (normalized: "c:\\program files\\common files\\attending other.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.603] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0199.603] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0df0 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0x2836e38 [0199.604] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0cd0 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde1fa8 [0199.604] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0cc0 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0x2836de0 [0199.604] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d50 [0199.604] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0x2836e90 [0199.604] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0199.604] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0199.604] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0199.604] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.604] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0199.604] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55ca460, ftCreationTime.dwHighDateTime=0x1d597e0, ftLastAccessTime.dwLowDateTime=0xc583950, ftLastAccessTime.dwHighDateTime=0x1d5d5ab, ftLastWriteTime.dwLowDateTime=0xc583950, ftLastWriteTime.dwHighDateTime=0x1d5d5ab, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0199.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\creditservice.exe" (normalized: "c:\\program files (x86)\\windowspowershell\\creditservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.605] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0199.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0e00 [0199.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xde2010 [0199.605] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c25dda0, ftCreationTime.dwHighDateTime=0x1d5ab99, ftLastAccessTime.dwLowDateTime=0x97532100, ftLastAccessTime.dwHighDateTime=0x1d59e1f, ftLastWriteTime.dwLowDateTime=0x97532100, ftLastWriteTime.dwHighDateTime=0x1d59e1f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="savingprogrammesofficially.exe", cAlternateFileName="SAVING~1.EXE")) returned 1 [0199.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\savingprogrammesofficially.exe" (normalized: "c:\\program files (x86)\\windowspowershell\\savingprogrammesofficially.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.605] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c25dda0, ftCreationTime.dwHighDateTime=0x1d5ab99, ftLastAccessTime.dwLowDateTime=0x97532100, ftLastAccessTime.dwHighDateTime=0x1d59e1f, ftLastWriteTime.dwLowDateTime=0x97532100, ftLastWriteTime.dwHighDateTime=0x1d59e1f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="savingprogrammesofficially.exe", cAlternateFileName="SAVING~1.EXE")) returned 0 [0199.605] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0199.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb6a69a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6a69a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0199.606] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb6a69a2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6a69a2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.606] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0199.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.606] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8993eb10, ftCreationTime.dwHighDateTime=0x1d56ce9, ftLastAccessTime.dwLowDateTime=0x8ff51cd0, ftLastAccessTime.dwHighDateTime=0x1d5d059, ftLastWriteTime.dwLowDateTime=0x8ff51cd0, ftLastWriteTime.dwHighDateTime=0x1d5d059, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0199.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\thunderbird.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\thunderbird.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.606] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33650100, ftCreationTime.dwHighDateTime=0x1d5e47d, ftLastAccessTime.dwLowDateTime=0x4e761b0, ftLastAccessTime.dwHighDateTime=0x1d5c871, ftLastWriteTime.dwLowDateTime=0x4e761b0, ftLastWriteTime.dwHighDateTime=0x1d5c871, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="workers.exe", cAlternateFileName="")) returned 1 [0199.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\workers.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\workers.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.607] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33650100, ftCreationTime.dwHighDateTime=0x1d5e47d, ftLastAccessTime.dwLowDateTime=0x4e761b0, ftLastAccessTime.dwHighDateTime=0x1d5c871, ftLastWriteTime.dwLowDateTime=0x4e761b0, ftLastWriteTime.dwHighDateTime=0x1d5c871, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="workers.exe", cAlternateFileName="")) returned 0 [0199.607] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0199.607] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ecb649, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ecb649, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0199.607] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9ecb649, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ecb649, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.607] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.607] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0da0 [0199.607] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xde2080 [0199.607] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa00210, ftCreationTime.dwHighDateTime=0x1d5b0bd, ftLastAccessTime.dwLowDateTime=0x1313e310, ftLastAccessTime.dwHighDateTime=0x1d58f25, ftLastWriteTime.dwLowDateTime=0x1313e310, ftLastWriteTime.dwHighDateTime=0x1d58f25, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hat.exe", cAlternateFileName="")) returned 1 [0199.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\hat.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\hat.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.607] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19340, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0199.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.608] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x1de400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0199.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.608] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x194200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0199.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.609] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf69289, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cf69289, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cf69289, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0199.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.609] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x18f7d52f, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17ce00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0199.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.609] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x18f7d52f, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17ce00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0199.609] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0199.609] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0199.609] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb7b1ade, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb7b1ade, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.609] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0199.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0dc0 [0199.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde20f0 [0199.609] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe727afc0, ftCreationTime.dwHighDateTime=0x1d5dbe1, ftLastAccessTime.dwLowDateTime=0xdd552d00, ftLastAccessTime.dwHighDateTime=0x1d581dd, ftLastWriteTime.dwLowDateTime=0xdd552d00, ftLastWriteTime.dwHighDateTime=0x1d581dd, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0199.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\scriptftp.exe" (normalized: "c:\\program files (x86)\\windows nt\\scriptftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.610] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b77d740, ftCreationTime.dwHighDateTime=0x1d5b593, ftLastAccessTime.dwLowDateTime=0xf818aba0, ftLastAccessTime.dwHighDateTime=0x1d5e2fc, ftLastWriteTime.dwLowDateTime=0xf818aba0, ftLastWriteTime.dwHighDateTime=0x1d5e2fc, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0199.610] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\spgagentservice.exe" (normalized: "c:\\program files (x86)\\windows nt\\spgagentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.610] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0199.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c80 [0199.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xde2158 [0199.610] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0199.610] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0199.610] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9f8a2b5, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9f8a2b5, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0199.610] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9f8a2b5, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9f8a2b5, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.610] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0199.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows multimedia platform\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.611] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b8f060, ftCreationTime.dwHighDateTime=0x1d57c44, ftLastAccessTime.dwLowDateTime=0xde7aec00, ftLastAccessTime.dwHighDateTime=0x1d5e72d, ftLastWriteTime.dwLowDateTime=0xde7aec00, ftLastWriteTime.dwHighDateTime=0x1d5e72d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vietnamese latitude qualifications.exe", cAlternateFileName="VIETNA~1.EXE")) returned 1 [0199.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\vietnamese latitude qualifications.exe" (normalized: "c:\\program files (x86)\\windows multimedia platform\\vietnamese latitude qualifications.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.611] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ec21640, ftCreationTime.dwHighDateTime=0x1d5d793, ftLastAccessTime.dwLowDateTime=0x2182c930, ftLastAccessTime.dwHighDateTime=0x1d5ded4, ftLastWriteTime.dwLowDateTime=0x2182c930, ftLastWriteTime.dwHighDateTime=0x1d5ded4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wy taiwan registration.exe", cAlternateFileName="WYTAIW~1.EXE")) returned 1 [0199.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\wy taiwan registration.exe" (normalized: "c:\\program files (x86)\\windows multimedia platform\\wy taiwan registration.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.611] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ec21640, ftCreationTime.dwHighDateTime=0x1d5d793, ftLastAccessTime.dwLowDateTime=0x2182c930, ftLastAccessTime.dwHighDateTime=0x1d5ded4, ftLastWriteTime.dwLowDateTime=0x2182c930, ftLastWriteTime.dwHighDateTime=0x1d5ded4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wy taiwan registration.exe", cAlternateFileName="WYTAIW~1.EXE")) returned 0 [0199.611] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0199.611] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b317b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0199.612] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b317b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.612] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0ce0 [0199.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xde21c8 [0199.612] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c40 [0199.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xde2238 [0199.612] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0199.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0cf0 [0199.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xde22a8 [0199.612] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xab521500, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0199.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0199.613] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0199.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d00 [0199.613] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x78) returned 0xde2328 [0199.613] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x734ad200, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x1b8800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0199.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.270] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0200.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0dd0 [0200.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xde23a8 [0200.270] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0200.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0de0 [0200.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xde2418 [0200.270] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe81e0c00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0200.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.271] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0200.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.286] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x97ef800, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0200.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.289] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc0c73f00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0200.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.290] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x3c74bc00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0200.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.290] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1a2f6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0200.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.290] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x30d5c500, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x10e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0200.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.290] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0200.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.290] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0200.290] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0200.290] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb78b738, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb78b738, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0200.291] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb78b738, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb78b738, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.291] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ff1bb0, ftCreationTime.dwHighDateTime=0x1d5df6f, ftLastAccessTime.dwLowDateTime=0xa0e81370, ftLastAccessTime.dwHighDateTime=0x1d567f5, ftLastWriteTime.dwLowDateTime=0xa0e81370, ftLastWriteTime.dwHighDateTime=0x1d567f5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="conscious_information_much.exe", cAlternateFileName="CONSCI~1.EXE")) returned 1 [0200.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\conscious_information_much.exe" (normalized: "c:\\program files (x86)\\windows mail\\conscious_information_much.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.291] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0200.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c50 [0200.291] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1880 [0200.291] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2b185f0, ftCreationTime.dwHighDateTime=0x1d5a397, ftLastAccessTime.dwLowDateTime=0xbc5a1e20, ftLastAccessTime.dwHighDateTime=0x1d58553, ftLastWriteTime.dwLowDateTime=0xbc5a1e20, ftLastWriteTime.dwHighDateTime=0x1d58553, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0200.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\isspos.exe" (normalized: "c:\\program files (x86)\\windows mail\\isspos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.292] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0200.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.292] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0200.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.292] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0200.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.293] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc379b0, ftCreationTime.dwHighDateTime=0x1d56c91, ftLastAccessTime.dwLowDateTime=0x99449120, ftLastAccessTime.dwHighDateTime=0x1d5dde3, ftLastWriteTime.dwLowDateTime=0x99449120, ftLastWriteTime.dwHighDateTime=0x1d5dde3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0200.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\totalcmd.exe" (normalized: "c:\\program files (x86)\\windows mail\\totalcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.293] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0200.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.293] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0200.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.294] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0200.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.294] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0200.294] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0200.294] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0200.294] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0200.294] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb73f386, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb73f386, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.294] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f6a2d0, ftCreationTime.dwHighDateTime=0x1d57ef6, ftLastAccessTime.dwLowDateTime=0x705e5780, ftLastAccessTime.dwHighDateTime=0x1d5ac80, ftLastWriteTime.dwLowDateTime=0x705e5780, ftLastWriteTime.dwHighDateTime=0x1d5ac80, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1 [0200.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\centralcreditcard.exe" (normalized: "c:\\program files (x86)\\windows defender\\centralcreditcard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.294] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0200.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d90 [0200.295] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde2498 [0200.295] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa686fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa686fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa686fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0200.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\EppManifest.dll" (normalized: "c:\\program files (x86)\\windows defender\\eppmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.295] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee5007f7, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0200.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.295] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee441c33, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xae5a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0200.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.295] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee631ad5, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x177a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0200.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.295] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee54ccae, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0200.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.296] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0200.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d60 [0200.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0xde2500 [0200.296] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0200.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\shellext.dll" (normalized: "c:\\program files (x86)\\windows defender\\shellext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.297] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c4379d0, ftCreationTime.dwHighDateTime=0x1d58d9a, ftLastAccessTime.dwLowDateTime=0xc6459400, ftLastAccessTime.dwHighDateTime=0x1d5679e, ftLastWriteTime.dwLowDateTime=0xc6459400, ftLastWriteTime.dwHighDateTime=0x1d5679e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0200.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\trillian.exe" (normalized: "c:\\program files (x86)\\windows defender\\trillian.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.297] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11aed870, ftCreationTime.dwHighDateTime=0x1d5c465, ftLastAccessTime.dwLowDateTime=0x5c087980, ftLastAccessTime.dwHighDateTime=0x1d5ba10, ftLastWriteTime.dwLowDateTime=0x5c087980, ftLastWriteTime.dwHighDateTime=0x1d5ba10, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0200.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\webdrive.exe" (normalized: "c:\\program files (x86)\\windows defender\\webdrive.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.297] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11aed870, ftCreationTime.dwHighDateTime=0x1d5c465, ftLastAccessTime.dwLowDateTime=0x5c087980, ftLastAccessTime.dwHighDateTime=0x1d5ba10, ftLastWriteTime.dwLowDateTime=0x5c087980, ftLastWriteTime.dwHighDateTime=0x1d5ba10, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0200.297] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0200.297] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb6807c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6807c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0200.298] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb6807c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6807c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.298] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0200.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d70 [0200.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6c) returned 0xde2568 [0200.298] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7879040, ftCreationTime.dwHighDateTime=0x1d5ac77, ftLastAccessTime.dwLowDateTime=0xa1f3ce30, ftLastAccessTime.dwHighDateTime=0x1d571a5, ftLastWriteTime.dwLowDateTime=0xa1f3ce30, ftLastWriteTime.dwHighDateTime=0x1d571a5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0200.298] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\notepad.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\notepad.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.298] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee6f090, ftCreationTime.dwHighDateTime=0x1d5cc54, ftLastAccessTime.dwLowDateTime=0x729d5550, ftLastAccessTime.dwHighDateTime=0x1d56b35, ftLastWriteTime.dwLowDateTime=0x729d5550, ftLastWriteTime.dwHighDateTime=0x1d56b35, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0200.298] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\skype.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\skype.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.298] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee6f090, ftCreationTime.dwHighDateTime=0x1d5cc54, ftLastAccessTime.dwLowDateTime=0x729d5550, ftLastAccessTime.dwHighDateTime=0x1d56b35, ftLastWriteTime.dwLowDateTime=0x729d5550, ftLastWriteTime.dwHighDateTime=0x1d56b35, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 0 [0200.298] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0200.298] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb6807c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6807c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd240d8 [0200.298] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xeb6807c8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb6807c8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.299] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0200.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d80 [0200.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0xde1e20 [0200.299] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8d35d0, ftCreationTime.dwHighDateTime=0x1d5878f, ftLastAccessTime.dwLowDateTime=0x822f2a30, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0x822f2a30, ftLastWriteTime.dwHighDateTime=0x1d5de1b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0200.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\pidgin.exe" (normalized: "c:\\program files (x86)\\msbuild\\pidgin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.299] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8d35d0, ftCreationTime.dwHighDateTime=0x1d5878f, ftLastAccessTime.dwLowDateTime=0x822f2a30, ftLastAccessTime.dwHighDateTime=0x1d5de1b, ftLastWriteTime.dwLowDateTime=0x822f2a30, ftLastWriteTime.dwHighDateTime=0x1d5de1b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 0 [0200.299] FindClose (in: hFindFile=0xd240d8 | out: hFindFile=0xd240d8) returned 1 [0200.299] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0200.299] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.299] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81b1a190, ftCreationTime.dwHighDateTime=0x1d5b8d3, ftLastAccessTime.dwLowDateTime=0xaf5eb800, ftLastAccessTime.dwHighDateTime=0x1d592d4, ftLastWriteTime.dwLowDateTime=0xaf5eb800, ftLastWriteTime.dwHighDateTime=0x1d592d4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0200.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\fpos.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\fpos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.300] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0200.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c60 [0200.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xde25e0 [0200.300] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0200.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0200.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde2658 [0200.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde27d0 [0200.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0200.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0200.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2938 [0200.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c70 [0200.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2938 | out: hHeap=0x2830000) returned 1 [0200.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c70 | out: hHeap=0x2830000) returned 1 [0200.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde27d0 [0200.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.314] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0200.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde27d0 [0200.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2820 [0200.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2a30 [0200.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2820 | out: hHeap=0x2830000) returned 1 [0200.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2a30 | out: hHeap=0x2830000) returned 1 [0200.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde27d0 [0200.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2658 | out: hHeap=0x2830000) returned 1 [0200.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x15d0, lpOverlapped=0x0) returned 1 [0200.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffea30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x15d0, lpOverlapped=0x0) returned 1 [0200.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0200.373] CloseHandle (hObject=0x1ec) returned 1 [0200.374] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.374] SetEndOfFile (hFile=0x1dc) returned 1 [0200.454] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe.vhd")) returned 1 [0200.455] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c582630, ftCreationTime.dwHighDateTime=0x1d5ca6f, ftLastAccessTime.dwLowDateTime=0x1dcb5bb0, ftLastAccessTime.dwHighDateTime=0x1d5b380, ftLastWriteTime.dwLowDateTime=0x1dcb5bb0, ftLastWriteTime.dwHighDateTime=0x1d5b380, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="OPERAM~1.EXE")) returned 1 [0200.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\operamail.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\operamail.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.455] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0200.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0200.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde2658 [0200.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde27d0 [0200.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0200.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0200.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2938 [0200.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0d10 [0200.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2938 | out: hHeap=0x2830000) returned 1 [0200.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0d10 | out: hHeap=0x2830000) returned 1 [0200.564] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde27d0 [0200.564] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.565] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0200.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde27d0 [0200.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2820 [0200.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2a30 [0200.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2820 | out: hHeap=0x2830000) returned 1 [0200.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2a30 | out: hHeap=0x2830000) returned 1 [0200.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde27d0 [0200.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2658 | out: hHeap=0x2830000) returned 1 [0200.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0200.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0200.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e62, lpOverlapped=0x0) returned 1 [0200.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe19e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e70, lpOverlapped=0x0) returned 1 [0200.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0200.574] CloseHandle (hObject=0x1ec) returned 1 [0200.574] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.575] SetEndOfFile (hFile=0x1dc) returned 1 [0200.575] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe.vhd")) returned 1 [0200.576] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0200.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0200.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde2658 [0200.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde27d0 [0200.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ee8 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ee8 | out: hHeap=0x2830000) returned 1 [0200.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde2938 [0200.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde0c70 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2938 | out: hHeap=0x2830000) returned 1 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde0c70 | out: hHeap=0x2830000) returned 1 [0200.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde27d0 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.637] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0200.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde27d0 [0200.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde2820 [0200.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde2a30 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2820 | out: hHeap=0x2830000) returned 1 [0200.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2a30 | out: hHeap=0x2830000) returned 1 [0200.638] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.639] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde27d0 [0200.639] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde27d0 | out: hHeap=0x2830000) returned 1 [0200.639] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2658 | out: hHeap=0x2830000) returned 1 [0200.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4dd, lpOverlapped=0x0) returned 1 [0200.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4e0, lpOverlapped=0x0) returned 1 [0200.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0200.640] CloseHandle (hObject=0x1ec) returned 1 [0200.640] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.640] SetEndOfFile (hFile=0x1dc) returned 1 [0200.754] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini.vhd")) returned 1 [0200.755] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0200.755] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0200.756] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb719116, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb719116, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0200.756] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xeb719116, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb719116, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.756] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbae58a10, ftCreationTime.dwHighDateTime=0x1d593fa, ftLastAccessTime.dwLowDateTime=0x325c1620, ftLastAccessTime.dwHighDateTime=0x1d57909, ftLastWriteTime.dwLowDateTime=0x325c1620, ftLastWriteTime.dwHighDateTime=0x1d57909, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="ACTIVE~1.EXE")) returned 1 [0200.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\active-charge.exe" (normalized: "c:\\program files (x86)\\microsoft.net\\active-charge.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.759] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0200.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d10 [0200.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x80) returned 0xde2658 [0200.759] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0200.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d20 [0200.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0xde26e0 [0200.759] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0 [0200.760] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0200.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0200.761] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xeb765613, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xeb765613, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.761] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ecacb80, ftCreationTime.dwHighDateTime=0x1d5c4d8, ftLastAccessTime.dwLowDateTime=0xbd8988c0, ftLastAccessTime.dwHighDateTime=0x1d57d84, ftLastWriteTime.dwLowDateTime=0xbd8988c0, ftLastWriteTime.dwHighDateTime=0x1d57d84, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0200.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\accupos.exe" (normalized: "c:\\program files (x86)\\microsoft office\\accupos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.761] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51586430, ftCreationTime.dwHighDateTime=0x1d5ae7d, ftLastAccessTime.dwLowDateTime=0x6243ee70, ftLastAccessTime.dwHighDateTime=0x1d5b24e, ftLastWriteTime.dwLowDateTime=0x6243ee70, ftLastWriteTime.dwHighDateTime=0x1d5b24e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0200.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\edcsvr.exe" (normalized: "c:\\program files (x86)\\microsoft office\\edcsvr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.762] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51586430, ftCreationTime.dwHighDateTime=0x1d5ae7d, ftLastAccessTime.dwLowDateTime=0x6243ee70, ftLastAccessTime.dwHighDateTime=0x1d5b24e, ftLastWriteTime.dwLowDateTime=0x6243ee70, ftLastWriteTime.dwHighDateTime=0x1d5b24e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 0 [0200.762] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0200.762] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9f17b69, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9f17b69, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0200.762] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9f17b69, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9f17b69, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.762] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe77b63b0, ftCreationTime.dwHighDateTime=0x1d57839, ftLastAccessTime.dwLowDateTime=0x8dcebdf0, ftLastAccessTime.dwHighDateTime=0x1d589da, ftLastWriteTime.dwLowDateTime=0x8dcebdf0, ftLastWriteTime.dwHighDateTime=0x1d589da, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edward radios approx.exe", cAlternateFileName="EDWARD~1.EXE")) returned 1 [0200.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\edward radios approx.exe" (normalized: "c:\\program files (x86)\\internet explorer\\edward radios approx.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.762] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0200.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0d30 [0200.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde2748 [0200.763] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95261236, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95261236, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95261236, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0200.763] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.763] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0200.763] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.763] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ie9props.propdesc", cAlternateFileName="")) returned 1 [0200.763] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ie9props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie9props.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.764] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14fb6499, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x75e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0200.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.765] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95214d68, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95214d68, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95214d68, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0200.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.765] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0200.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.765] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8d39e400, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0200.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.765] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0200.765] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c90 [0200.765] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0xde27b0 [0200.765] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0200.765] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0c70 [0200.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0xde2818 [0200.766] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0200.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.766] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0200.766] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0200.766] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0200.766] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.766] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0200.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde0ca0 [0200.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0x2836a70 [0200.766] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0200.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2920 [0200.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde1b20 [0200.767] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 1 [0200.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a40 [0200.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836ee8 [0200.767] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 0 [0200.767] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0200.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef523b11, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef523b11, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0200.767] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xef523b11, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xef523b11, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.767] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0200.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a10 [0200.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1be0 [0200.767] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62f550, ftCreationTime.dwHighDateTime=0x1d5c3b0, ftLastAccessTime.dwLowDateTime=0xea077c80, ftLastAccessTime.dwHighDateTime=0x1d5bea8, ftLastWriteTime.dwLowDateTime=0xea077c80, ftLastWriteTime.dwHighDateTime=0x1d5bea8, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0200.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\afr38.exe" (normalized: "c:\\program files (x86)\\common files\\afr38.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.768] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f447150, ftCreationTime.dwHighDateTime=0x1d5c6e6, ftLastAccessTime.dwLowDateTime=0xb9cca090, ftLastAccessTime.dwHighDateTime=0x1d57e70, ftLastWriteTime.dwLowDateTime=0xb9cca090, ftLastWriteTime.dwHighDateTime=0x1d57e70, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="agesarlington.exe", cAlternateFileName="AGESAR~1.EXE")) returned 1 [0200.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\agesarlington.exe" (normalized: "c:\\program files (x86)\\common files\\agesarlington.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.768] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2960 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0xde1820 [0200.768] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2930 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0xde2c88 [0200.768] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde28e0 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5a) returned 0xde2d00 [0200.768] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde28d0 [0200.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde18e0 [0200.768] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0200.768] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0200.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9ef199b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ef199b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24158 [0200.769] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9ef199b, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9ef199b, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.769] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1 [0200.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2940 [0200.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde2d90 [0200.770] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba7900, ftCreationTime.dwHighDateTime=0x1d5dbda, ftLastAccessTime.dwLowDateTime=0xb9ed4d10, ftLastAccessTime.dwHighDateTime=0x1d56e0b, ftLastWriteTime.dwLowDateTime=0xb9ed4d10, ftLastWriteTime.dwHighDateTime=0x1d56e0b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="courts-womens.exe", cAlternateFileName="COURTS~1.EXE")) returned 1 [0200.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\courts-womens.exe" (normalized: "c:\\program files (x86)\\adobe\\courts-womens.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0200.770] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ba7900, ftCreationTime.dwHighDateTime=0x1d5dbda, ftLastAccessTime.dwLowDateTime=0xb9ed4d10, ftLastAccessTime.dwHighDateTime=0x1d56e0b, ftLastWriteTime.dwLowDateTime=0xb9ed4d10, ftLastWriteTime.dwHighDateTime=0x1d56e0b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="courts-womens.exe", cAlternateFileName="COURTS~1.EXE")) returned 0 [0200.770] FindClose (in: hFindFile=0xd24158 | out: hFindFile=0xd24158) returned 1 [0200.770] FindFirstFileW (in: lpFileName="C:\\ProgramData\\WindowsHolographicDevices\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0200.771] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.771] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 1 [0200.771] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a00 [0200.771] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6c) returned 0xde3570 [0200.771] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 0 [0200.771] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0200.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24358 [0200.772] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.772] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa15a1d83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa15a1d83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0200.772] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a20 [0200.772] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3c) returned 0x283efa0 [0200.772] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa15a1d83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa15a1d83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0200.772] FindClose (in: hFindFile=0xd24358 | out: hFindFile=0xd24358) returned 1 [0200.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0200.773] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.773] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7fc3b83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xd7fc3b83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0200.773] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde28f0 [0200.773] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836ff0 [0200.773] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7fc3b83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xd7fc3b83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0200.773] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0200.773] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0200.773] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.773] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0200.773] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0200.773] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0200.775] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.775] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0200.776] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0200.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde35e8 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde3760 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0200.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde38c8 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde2a50 [0200.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde38c8 | out: hHeap=0x2830000) returned 1 [0200.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2a50 | out: hHeap=0x2830000) returned 1 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0200.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.831] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde3760 [0200.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde37b0 [0200.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde39c0 [0200.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde37b0 | out: hHeap=0x2830000) returned 1 [0200.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde39c0 | out: hHeap=0x2830000) returned 1 [0200.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0200.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde35e8 | out: hHeap=0x2830000) returned 1 [0200.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x430, lpOverlapped=0x0) returned 1 [0200.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x430, lpOverlapped=0x0) returned 1 [0200.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0200.834] CloseHandle (hObject=0x1ec) returned 1 [0200.835] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.835] SetEndOfFile (hFile=0x1dc) returned 1 [0200.835] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag.vhd")) returned 1 [0200.836] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0200.836] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0200.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde35e8 [0200.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde3760 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde38c8 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde2a30 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde38c8 | out: hHeap=0x2830000) returned 1 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2a30 | out: hHeap=0x2830000) returned 1 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.911] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde3760 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde37b0 [0200.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde39c0 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde37b0 | out: hHeap=0x2830000) returned 1 [0200.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde39c0 | out: hHeap=0x2830000) returned 1 [0200.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0200.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde35e8 | out: hHeap=0x2830000) returned 1 [0200.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x42c, lpOverlapped=0x0) returned 1 [0200.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x430, lpOverlapped=0x0) returned 1 [0200.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0200.930] CloseHandle (hObject=0x1ec) returned 1 [0200.930] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.930] SetEndOfFile (hFile=0x1dc) returned 1 [0200.931] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag.vhd")) returned 1 [0200.931] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0200.932] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0200.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde35e8 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde3760 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0200.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde38c8 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde2970 [0200.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde38c8 | out: hHeap=0x2830000) returned 1 [0200.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde2970 | out: hHeap=0x2830000) returned 1 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0200.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.963] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde3760 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde37b0 [0200.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde39c0 [0200.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde37b0 | out: hHeap=0x2830000) returned 1 [0200.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde39c0 | out: hHeap=0x2830000) returned 1 [0200.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0200.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0200.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde35e8 | out: hHeap=0x2830000) returned 1 [0200.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x42f, lpOverlapped=0x0) returned 1 [0200.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbd1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0200.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x430, lpOverlapped=0x0) returned 1 [0200.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0200.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0200.966] CloseHandle (hObject=0x1ec) returned 1 [0200.966] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0200.966] SetEndOfFile (hFile=0x1dc) returned 1 [0200.967] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag.vhd")) returned 1 [0201.047] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0201.047] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0201.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde35e8 [0201.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde3760 [0201.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0201.059] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x28370a0 | out: hHeap=0x2830000) returned 1 [0201.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde38c8 [0201.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde29a0 [0201.059] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0201.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde38c8 | out: hHeap=0x2830000) returned 1 [0201.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde29a0 | out: hHeap=0x2830000) returned 1 [0201.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0201.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0201.060] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0201.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde3760 [0201.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde37b0 [0201.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde39c0 [0201.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde37b0 | out: hHeap=0x2830000) returned 1 [0201.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde39c0 | out: hHeap=0x2830000) returned 1 [0201.062] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0201.062] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde3760 [0201.062] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde3760 | out: hHeap=0x2830000) returned 1 [0201.062] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde35e8 | out: hHeap=0x2830000) returned 1 [0201.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3e5, lpOverlapped=0x0) returned 1 [0201.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3f0, lpOverlapped=0x0) returned 1 [0201.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0201.063] CloseHandle (hObject=0x1ec) returned 1 [0201.063] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.063] SetEndOfFile (hFile=0x1dc) returned 1 [0201.063] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag.vhd")) returned 1 [0201.064] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0 [0201.064] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0201.064] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0201.066] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.066] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a30 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde35e8 [0201.066] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a80 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x88) returned 0xde3690 [0201.066] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a50 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde3720 [0201.066] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a60 [0201.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x88) returned 0xde37c8 [0201.066] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a70 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0xde3858 [0201.067] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2a90 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0xde3900 [0201.067] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde28c0 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0xde39a8 [0201.067] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde29e0 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde46f0 [0201.067] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0201.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2900 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde3a78 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2aa0 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde48e8 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde28b0 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde4258 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde29f0 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x88) returned 0xde4a58 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2910 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde4840 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2950 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0xde3c70 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2970 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x88) returned 0xde4ae8 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2980 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x88) returned 0xde4b78 [0201.068] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0201.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2990 [0201.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x88) returned 0xde4c08 [0201.069] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0201.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde29a0 [0201.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x9e) returned 0xde3dc0 [0201.069] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0201.069] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0201.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0201.070] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.070] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0201.070] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde29b0 [0201.071] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0x2837e80 [0201.071] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0201.071] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0201.071] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0201.156] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.156] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0201.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde29c0 [0201.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x28370a0 [0201.156] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0201.156] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0201.156] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24358 [0201.157] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.157] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.157] FindClose (in: hFindFile=0xd24358 | out: hFindFile=0xd24358) returned 1 [0201.157] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0201.157] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.157] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0201.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde29d0 [0201.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2837800 [0201.157] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0201.158] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0201.158] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2af0 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x40) returned 0xde4c98 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b60 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0xde4ce0 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b10 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x28378c0 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2ac0 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x2837ec0 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b40 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x2837b40 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b80 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0xde4d18 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2ae0 [0201.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2837900 [0201.158] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b00 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2e) returned 0xde4d50 [0201.159] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0201.159] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0201.159] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24098 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2ab0 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0xde4d88 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c40 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2837c40 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9ffd1af7, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0x9ffd1af7, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c50 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0xde4dc0 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe76cd73d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe76cd73d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b20 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x2837c80 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b50 [0201.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x2837cc0 [0201.159] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0201.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b30 [0201.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0x2837d00 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0201.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b70 [0201.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0xde4f70 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe90a3645, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe90a3645, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0201.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2bf0 [0201.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2c) returned 0xde4fe0 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6c4d382c, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6c4d382c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0201.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT" (normalized: "c:\\users\\fd1hvy\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0201.160] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0201.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2ad0 [0201.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0x2837dc0 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe9731db9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9731db9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0201.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2b90 [0201.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0xde5af0 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0201.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2ba0 [0201.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x38) returned 0xde5bf0 [0201.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0201.162] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2bb0 [0201.162] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0xde5d30 [0201.162] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0201.162] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0201.162] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0201.162] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe96bf718, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe96bf718, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0201.162] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2bc0 [0201.162] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2e) returned 0xde5088 [0201.162] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe96bf718, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe96bf718, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0201.162] FindClose (in: hFindFile=0xd24098 | out: hFindFile=0xd24098) returned 1 [0201.162] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0201.166] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.166] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0201.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c70 [0201.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x44) returned 0xde6208 [0201.166] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0201.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2bd0 [0201.166] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x48) returned 0xde6258 [0201.166] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0 [0201.166] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0201.167] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0201.167] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2be0 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0xde5fb0 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c00 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x32) returned 0xde61b0 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c10 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0xde5d70 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c20 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0xde5cb0 [0201.168] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c30 [0201.168] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0xde5ff0 [0201.169] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0201.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde2c60 [0201.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2e) returned 0xde4f38 [0201.169] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0201.169] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0201.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6428 [0201.169] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2e) returned 0xde4ec8 [0201.169] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0201.169] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0201.169] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0201.169] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0201.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde66b0 [0201.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde6828 [0201.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0201.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0201.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde6990 [0201.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6418 [0201.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6828 | out: hHeap=0x2830000) returned 1 [0201.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0201.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6418 | out: hHeap=0x2830000) returned 1 [0201.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde6828 [0201.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6828 | out: hHeap=0x2830000) returned 1 [0201.182] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0201.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0201.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde7030 [0201.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde7240 [0201.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0201.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7240 | out: hHeap=0x2830000) returned 1 [0201.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0201.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7030 [0201.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0201.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66b0 | out: hHeap=0x2830000) returned 1 [0201.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0201.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0201.258] CloseHandle (hObject=0x1ec) returned 1 [0201.258] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.258] SetEndOfFile (hFile=0x1dc) returned 1 [0201.351] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.vhd" (normalized: "c:\\users\\default\\ntuser.dat.vhd")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0201.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde63a8 [0201.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x34) returned 0xde60b0 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0201.352] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0201.353] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0201.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6388 [0201.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3a) returned 0xde66b0 [0201.353] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0201.353] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0201.353] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0201.353] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0201.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde62d8 [0201.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x30) returned 0xde4fa8 [0201.353] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0201.353] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0201.353] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0201.354] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.354] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a5195, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0201.354] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde62f8 [0201.354] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x48) returned 0xde6e90 [0201.354] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a78b4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a78b4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xc981b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwcompatShared.txt", cAlternateFileName="HWCOMP~1.TXT")) returned 1 [0201.354] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0201.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0201.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0201.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0201.367] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0201.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0201.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6398 [0201.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0201.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6398 | out: hHeap=0x2830000) returned 1 [0201.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0201.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.368] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0201.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ad0 [0201.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0201.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0201.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0201.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ad0 | out: hHeap=0x2830000) returned 1 [0201.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0201.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0201.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x181b, lpOverlapped=0x0) returned 1 [0201.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe7e5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1820, lpOverlapped=0x0) returned 1 [0201.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0201.610] CloseHandle (hObject=0x1ec) returned 1 [0201.610] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.610] SetEndOfFile (hFile=0x1dc) returned 1 [0201.763] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt.vhd")) returned 1 [0201.764] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b1515, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0201.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde64b8 [0201.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x46) returned 0xde6ad0 [0201.764] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ux", cAlternateFileName="")) returned 1 [0201.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde63d8 [0201.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x42) returned 0xde6a30 [0201.764] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ux", cAlternateFileName="")) returned 0 [0201.764] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0201.765] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\dll2\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37e09b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0201.765] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37e09b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.765] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37e09b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37e09b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xb8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 1 [0201.765] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll2\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll2\\webservices.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0201.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0201.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0201.848] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0201.848] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6488 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6488 | out: hHeap=0x2830000) returned 1 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.849] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0201.849] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0201.849] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.850] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0201.850] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0201.850] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0201.850] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0201.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0201.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0201.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x400, lpOverlapped=0x0) returned 1 [0202.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x400, lpOverlapped=0x0) returned 1 [0202.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0202.033] CloseHandle (hObject=0x1ec) returned 1 [0202.033] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.033] SetEndOfFile (hFile=0x1dc) returned 1 [0202.139] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll2\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll2\\webservices.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll2\\webservices.dll.vhd" (normalized: "c:\\windows10upgrade\\dll2\\webservices.dll.vhd")) returned 1 [0202.140] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37e09b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37e09b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xb8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 0 [0202.140] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0202.140] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\dll1\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37926f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0202.141] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37926f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.141] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea376b75, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea376b75, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x204c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cosqueryxp.dll", cAlternateFileName="COSQUE~1.DLL")) returned 1 [0202.141] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll1\\cosqueryxp.dll" (normalized: "c:\\windows10upgrade\\dll1\\cosqueryxp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0202.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.152] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0202.152] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0202.152] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0202.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0202.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0202.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0202.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0202.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.155] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0202.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0202.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0202.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0202.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0202.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0202.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0202.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4c8, lpOverlapped=0x0) returned 1 [0202.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4d0, lpOverlapped=0x0) returned 1 [0202.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0202.220] CloseHandle (hObject=0x1ec) returned 1 [0202.220] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.220] SetEndOfFile (hFile=0x1dc) returned 1 [0202.221] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll1\\cosqueryxp.dll" (normalized: "c:\\windows10upgrade\\dll1\\cosqueryxp.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll1\\cosqueryxp.dll.vhd" (normalized: "c:\\windows10upgrade\\dll1\\cosqueryxp.dll.vhd")) returned 1 [0202.222] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea377ed3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x3b0c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wdscore.dll", cAlternateFileName="")) returned 1 [0202.222] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll1\\wdscore.dll" (normalized: "c:\\windows10upgrade\\dll1\\wdscore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0202.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0202.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0202.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0202.233] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0202.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.234] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63e8 [0202.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0202.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63e8 | out: hHeap=0x2830000) returned 1 [0202.234] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.234] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0202.234] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0202.234] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0202.234] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0202.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0202.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0202.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0202.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10c8, lpOverlapped=0x0) returned 1 [0202.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10d0, lpOverlapped=0x0) returned 1 [0202.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0202.350] CloseHandle (hObject=0x1ec) returned 1 [0202.350] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.350] SetEndOfFile (hFile=0x1dc) returned 1 [0202.451] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll1\\wdscore.dll" (normalized: "c:\\windows10upgrade\\dll1\\wdscore.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll1\\wdscore.dll.vhd" (normalized: "c:\\windows10upgrade\\dll1\\wdscore.dll.vhd")) returned 1 [0202.452] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37926f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37926f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xe9ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 1 [0202.452] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll1\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll1\\webservices.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0202.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0202.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0202.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0202.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.461] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0202.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0202.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0202.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0202.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0202.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0202.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0202.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0202.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0202.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec8, lpOverlapped=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ed0, lpOverlapped=0x0) returned 1 [0202.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0202.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0202.814] CloseHandle (hObject=0x1ec) returned 1 [0202.814] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.814] SetEndOfFile (hFile=0x1dc) returned 1 [0203.081] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll1\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll1\\webservices.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll1\\webservices.dll.vhd" (normalized: "c:\\windows10upgrade\\dll1\\webservices.dll.vhd")) returned 1 [0203.083] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37926f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37926f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xe9ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 0 [0203.084] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0203.084] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\2052\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0203.084] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.084] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea355be9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 1 [0203.084] CreateFileW (lpFileName="C:\\Windows10Upgrade\\2052\\DWINTL20.DLL" (normalized: "c:\\windows10upgrade\\2052\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0203.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0203.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0203.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0203.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0203.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0203.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0203.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0203.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0203.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0203.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xec8, lpOverlapped=0x0) returned 1 [0203.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xed0, lpOverlapped=0x0) returned 1 [0203.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0203.206] CloseHandle (hObject=0x1ec) returned 1 [0203.206] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.206] SetEndOfFile (hFile=0x1dc) returned 1 [0203.207] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\2052\\DWINTL20.DLL" (normalized: "c:\\windows10upgrade\\2052\\dwintl20.dll"), lpNewFileName="C:\\Windows10Upgrade\\2052\\DWINTL20.DLL.vhd" (normalized: "c:\\windows10upgrade\\2052\\dwintl20.dll.vhd")) returned 1 [0203.207] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea355be9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 0 [0203.208] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0203.208] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0203.211] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.211] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b4fa7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b4fa7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x397, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="block.png", cAlternateFileName="")) returned 1 [0203.211] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0203.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0203.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6448 [0203.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6448 | out: hHeap=0x2830000) returned 1 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.227] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.227] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0203.227] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0203.228] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.228] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0203.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0203.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x397, lpOverlapped=0x0) returned 1 [0203.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3a0, lpOverlapped=0x0) returned 1 [0203.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0203.230] CloseHandle (hObject=0x1ec) returned 1 [0203.231] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.231] SetEndOfFile (hFile=0x1dc) returned 1 [0203.231] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png.vhd")) returned 1 [0203.232] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b8a24, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b8a24, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x749e0600, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0x1ba8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bluelogo.png", cAlternateFileName="")) returned 1 [0203.232] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0203.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0203.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6348 [0203.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6348 | out: hHeap=0x2830000) returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.369] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0203.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0203.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.372] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0203.372] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.372] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.372] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0203.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ba8, lpOverlapped=0x0) returned 1 [0203.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe458, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1bb0, lpOverlapped=0x0) returned 1 [0203.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0203.373] CloseHandle (hObject=0x1ec) returned 1 [0203.374] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.374] SetEndOfFile (hFile=0x1dc) returned 1 [0203.374] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png.vhd")) returned 1 [0203.375] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b9dbd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b9dbd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bullet.png", cAlternateFileName="")) returned 1 [0203.375] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0203.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0203.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0203.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0203.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0203.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0203.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.384] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0203.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0203.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0203.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0203.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.386] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0203.386] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.386] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.386] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0203.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdd, lpOverlapped=0x0) returned 1 [0203.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe0, lpOverlapped=0x0) returned 1 [0203.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0203.388] CloseHandle (hObject=0x1ec) returned 1 [0203.388] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.389] SetEndOfFile (hFile=0x1dc) returned 1 [0203.389] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png.vhd")) returned 1 [0203.391] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bb141, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bb141, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default.css", cAlternateFileName="")) returned 1 [0203.391] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0203.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.401] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0203.401] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0203.401] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0203.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0203.401] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.401] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6468 [0203.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6468 | out: hHeap=0x2830000) returned 1 [0203.402] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.402] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.402] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0203.402] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0203.402] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0203.402] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0203.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0203.597] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0203.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1687, lpOverlapped=0x0) returned 1 [0203.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe979, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1690, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1690, lpOverlapped=0x0) returned 1 [0203.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0203.634] CloseHandle (hObject=0x1ec) returned 1 [0203.634] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.634] SetEndOfFile (hFile=0x1dc) returned 1 [0203.635] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css.vhd")) returned 1 [0203.636] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bc4cd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bc4cd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xf44d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default.htm", cAlternateFileName="")) returned 1 [0203.636] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0203.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0203.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0203.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0203.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0203.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6308 [0203.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6308 | out: hHeap=0x2830000) returned 1 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.683] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c10 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0203.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0203.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0203.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c10 | out: hHeap=0x2830000) returned 1 [0203.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0203.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0203.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0203.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0203.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0203.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0205.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0205.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0205.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0205.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0205.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0205.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0205.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0205.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x144d, lpOverlapped=0x0) returned 1 [0205.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebb3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1450, lpOverlapped=0x0) returned 1 [0205.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0205.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0205.094] CloseHandle (hObject=0x1ec) returned 1 [0205.095] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.095] SetEndOfFile (hFile=0x1dc) returned 1 [0205.199] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm.vhd")) returned 1 [0205.200] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bd859, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bd859, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x13e24500, ftLastWriteTime.dwHighDateTime=0x1d2ee61, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_eos.css", cAlternateFileName="DEFAUL~1.CSS")) returned 1 [0205.200] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0205.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0205.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6408 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6408 | out: hHeap=0x2830000) returned 1 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0205.276] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0205.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0205.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0205.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0205.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0205.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0205.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0205.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a2c, lpOverlapped=0x0) returned 1 [0205.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe5d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a30, lpOverlapped=0x0) returned 1 [0205.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0205.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0205.291] CloseHandle (hObject=0x1ec) returned 1 [0205.291] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0205.291] SetEndOfFile (hFile=0x1dc) returned 1 [0205.291] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css.vhd")) returned 1 [0205.292] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bff6c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bff6c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea75e900, ftLastWriteTime.dwHighDateTime=0x1d2ee61, nFileSizeHigh=0x0, nFileSizeLow=0xda3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_eos.htm", cAlternateFileName="DEFAUL~1.HTM")) returned 1 [0205.292] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0205.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0205.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0207.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0207.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0207.272] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836968 [0207.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836968 | out: hHeap=0x2830000) returned 1 [0207.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0207.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0207.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0207.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0207.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0207.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0207.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0207.273] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0207.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0207.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0207.273] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0207.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0207.273] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0207.274] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0207.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0207.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0207.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0207.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0207.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0208.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0208.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0208.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0208.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0208.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0208.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a3a, lpOverlapped=0x0) returned 1 [0209.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe5c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a40, lpOverlapped=0x0) returned 1 [0209.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.064] CloseHandle (hObject=0x1ec) returned 1 [0209.064] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.064] SetEndOfFile (hFile=0x1dc) returned 1 [0209.065] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm.vhd")) returned 1 [0209.065] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c12fc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c12fc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1468, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_oobe.css", cAlternateFileName="DEFAUL~2.CSS")) returned 1 [0209.065] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.078] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.078] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.078] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0209.078] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0209.078] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.078] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde62e8 [0209.079] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.079] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.079] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde62e8 | out: hHeap=0x2830000) returned 1 [0209.079] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.079] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.079] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.079] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0209.079] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.079] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.079] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.079] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0209.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1468, lpOverlapped=0x0) returned 1 [0209.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1470, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1470, lpOverlapped=0x0) returned 1 [0209.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.083] CloseHandle (hObject=0x1ec) returned 1 [0209.083] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.084] SetEndOfFile (hFile=0x1dc) returned 1 [0209.084] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css.vhd")) returned 1 [0209.085] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c2685, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c2685, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x7f589b00, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0x100ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_oobe.htm", cAlternateFileName="DEFAUL~2.HTM")) returned 1 [0209.085] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6308 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6308 | out: hHeap=0x2830000) returned 1 [0209.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.097] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0209.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0209.099] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xae, lpOverlapped=0x0) returned 1 [0209.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb0, lpOverlapped=0x0) returned 1 [0209.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.268] CloseHandle (hObject=0x1ec) returned 1 [0209.268] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.268] SetEndOfFile (hFile=0x1dc) returned 1 [0209.269] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm.vhd")) returned 1 [0209.269] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3c4d9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea5f6eb5, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EULA", cAlternateFileName="")) returned 1 [0209.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde64c8 [0209.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836968 [0209.270] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.css", cAlternateFileName="")) returned 1 [0209.270] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6308 [0209.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6308 | out: hHeap=0x2830000) returned 1 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.280] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0209.282] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x52, lpOverlapped=0x0) returned 1 [0209.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x60, lpOverlapped=0x0) returned 1 [0209.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.284] CloseHandle (hObject=0x1ec) returned 1 [0209.284] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.284] SetEndOfFile (hFile=0x1dc) returned 1 [0209.284] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css.vhd")) returned 1 [0209.285] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetStarted.png", cAlternateFileName="GETSTA~1.PNG")) returned 1 [0209.285] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.297] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.298] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0209.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.299] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.299] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xef0, lpOverlapped=0x0) returned 1 [0209.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff110, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xef0, lpOverlapped=0x0) returned 1 [0209.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.300] CloseHandle (hObject=0x1ec) returned 1 [0209.300] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.300] SetEndOfFile (hFile=0x1dc) returned 1 [0209.300] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png.vhd")) returned 1 [0209.301] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xfe3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetStartedHoverOver.png", cAlternateFileName="GETSTA~2.PNG")) returned 1 [0209.301] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.360] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.360] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6318 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6318 | out: hHeap=0x2830000) returned 1 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.361] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.361] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.361] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.362] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0209.362] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.362] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.362] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfe3, lpOverlapped=0x0) returned 1 [0209.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff01d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xff0, lpOverlapped=0x0) returned 1 [0209.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.363] CloseHandle (hObject=0x1ec) returned 1 [0209.363] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.363] SetEndOfFile (hFile=0x1dc) returned 1 [0209.467] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png.vhd")) returned 1 [0209.467] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x43f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="loading.gif", cAlternateFileName="")) returned 1 [0209.468] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6408 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6408 | out: hHeap=0x2830000) returned 1 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.573] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.573] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.573] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0209.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3f3, lpOverlapped=0x0) returned 1 [0209.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc0d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x400, lpOverlapped=0x0) returned 1 [0209.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.577] CloseHandle (hObject=0x1ec) returned 1 [0209.578] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.578] SetEndOfFile (hFile=0x1dc) returned 1 [0209.578] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif.vhd")) returned 1 [0209.578] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x749e0600, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0xe5d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lock.png", cAlternateFileName="")) returned 1 [0209.579] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde62e8 [0209.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde62e8 | out: hHeap=0x2830000) returned 1 [0209.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.590] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.590] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0209.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.591] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.591] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.592] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0209.592] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.592] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.592] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe5d, lpOverlapped=0x0) returned 1 [0209.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1a3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe60, lpOverlapped=0x0) returned 1 [0209.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.593] CloseHandle (hObject=0x1ec) returned 1 [0209.593] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.593] SetEndOfFile (hFile=0x1dc) returned 1 [0209.594] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png.vhd")) returned 1 [0209.594] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0209.594] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde62e8 [0209.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde62e8 | out: hHeap=0x2830000) returned 1 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.605] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.605] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.605] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.606] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0209.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa33, lpOverlapped=0x0) returned 1 [0209.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5cd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa40, lpOverlapped=0x0) returned 1 [0209.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.624] CloseHandle (hObject=0x1ec) returned 1 [0209.624] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.624] SetEndOfFile (hFile=0x1dc) returned 1 [0209.716] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png.vhd")) returned 1 [0209.717] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="marketing.png", cAlternateFileName="MARKET~1.PNG")) returned 1 [0209.717] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6458 [0209.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6458 | out: hHeap=0x2830000) returned 1 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.727] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde66f8 [0209.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.729] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0209.729] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde66f8 [0209.729] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde66f8 | out: hHeap=0x2830000) returned 1 [0209.729] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ed, lpOverlapped=0x0) returned 1 [0209.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f0, lpOverlapped=0x0) returned 1 [0209.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.731] CloseHandle (hObject=0x1ec) returned 1 [0209.732] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.732] SetEndOfFile (hFile=0x1dc) returned 1 [0209.732] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png.vhd")) returned 1 [0209.733] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea60a72c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WinJS", cAlternateFileName="MICROS~1.WIN")) returned 1 [0209.733] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6418 [0209.733] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xde66f8 [0209.733] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea627c0d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea627c0d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x97e0d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetworkIssueFAQ.mht", cAlternateFileName="NETWOR~1.MHT")) returned 1 [0209.733] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0209.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6458 [0209.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0209.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6458 | out: hHeap=0x2830000) returned 1 [0209.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.745] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0209.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.745] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0209.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.745] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0209.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0209.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.827] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0209.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0209.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e0d, lpOverlapped=0x0) returned 1 [0209.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe1f3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e10, lpOverlapped=0x0) returned 1 [0209.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.836] CloseHandle (hObject=0x1ec) returned 1 [0209.840] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.840] SetEndOfFile (hFile=0x1dc) returned 1 [0209.840] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht.vhd")) returned 1 [0209.894] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea631830, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea631830, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NoNetworkConnection.png", cAlternateFileName="NONETW~1.PNG")) returned 1 [0209.895] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0209.907] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6308 [0209.907] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.907] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0209.907] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6308 | out: hHeap=0x2830000) returned 1 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.907] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.907] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.907] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0209.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0209.908] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.908] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0209.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0209.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x875, lpOverlapped=0x0) returned 1 [0209.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff78b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x880, lpOverlapped=0x0) returned 1 [0209.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.910] CloseHandle (hObject=0x1ec) returned 1 [0209.911] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.911] SetEndOfFile (hFile=0x1dc) returned 1 [0209.911] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png.vhd")) returned 1 [0209.912] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea631830, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea631830, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NoNetworkConnectionHoverOver.png", cAlternateFileName="NONETW~2.PNG")) returned 1 [0209.912] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0209.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6398 [0209.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0209.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6398 | out: hHeap=0x2830000) returned 1 [0209.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.940] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0209.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0209.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0209.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0209.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8a4, lpOverlapped=0x0) returned 1 [0209.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff75c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8b0, lpOverlapped=0x0) returned 1 [0209.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.942] CloseHandle (hObject=0x1ec) returned 1 [0209.942] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.943] SetEndOfFile (hFile=0x1dc) returned 1 [0209.943] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png.vhd")) returned 1 [0209.944] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63c947, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pass.png", cAlternateFileName="")) returned 1 [0209.944] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0209.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0209.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0209.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6308 [0209.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0209.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6308 | out: hHeap=0x2830000) returned 1 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.994] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0209.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0209.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0209.996] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0209.996] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0209.996] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0209.996] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0209.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x71e, lpOverlapped=0x0) returned 1 [0209.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0209.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x720, lpOverlapped=0x0) returned 1 [0209.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0209.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0209.997] CloseHandle (hObject=0x1ec) returned 1 [0209.997] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0209.997] SetEndOfFile (hFile=0x1dc) returned 1 [0210.157] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png.vhd")) returned 1 [0210.159] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63c947, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pass.png", cAlternateFileName="")) returned 0 [0210.159] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0210.159] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\i386\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b2895, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0210.161] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b2895, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.161] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ab347, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ab347, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BiosBlocks.xml", cAlternateFileName="BIOSBL~1.XML")) returned 1 [0210.161] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\i386\\biosblocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6348 [0210.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6348 | out: hHeap=0x2830000) returned 1 [0210.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.172] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0210.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0210.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x600, lpOverlapped=0x0) returned 1 [0210.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x600, lpOverlapped=0x0) returned 1 [0210.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.220] CloseHandle (hObject=0x1ec) returned 1 [0210.220] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.220] SetEndOfFile (hFile=0x1dc) returned 1 [0210.243] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\i386\\biosblocks.xml"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\biosblocks.xml.vhd")) returned 1 [0210.244] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ac6e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ac6e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x4071, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwcompat.txt", cAlternateFileName="")) returned 1 [0210.244] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwcompat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.265] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63b8 [0210.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63b8 | out: hHeap=0x2830000) returned 1 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.266] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0210.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x71, lpOverlapped=0x0) returned 1 [0210.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x80, lpOverlapped=0x0) returned 1 [0210.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.275] CloseHandle (hObject=0x1ec) returned 1 [0210.275] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.275] SetEndOfFile (hFile=0x1dc) returned 1 [0210.276] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwcompat.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\hwcompat.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwcompat.txt.vhd")) returned 1 [0210.276] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ada69, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ada69, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwexclude.txt", cAlternateFileName="HWEXCL~1.TXT")) returned 1 [0210.276] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwexclude.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6308 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6308 | out: hHeap=0x2830000) returned 1 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.300] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.306] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0210.306] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.306] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.306] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8d7, lpOverlapped=0x0) returned 1 [0210.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff729, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8e0, lpOverlapped=0x0) returned 1 [0210.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.307] CloseHandle (hObject=0x1ec) returned 1 [0210.307] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.307] SetEndOfFile (hFile=0x1dc) returned 1 [0210.327] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwexclude.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\hwexclude.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwexclude.txt.vhd")) returned 1 [0210.328] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3aedef, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3aedef, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2684, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.cat", cAlternateFileName="")) returned 1 [0210.328] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0210.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0210.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6358 [0210.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6358 | out: hHeap=0x2830000) returned 1 [0210.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.345] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6a80 [0210.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6a80 | out: hHeap=0x2830000) returned 1 [0210.347] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x684, lpOverlapped=0x0) returned 1 [0210.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff97c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x690, lpOverlapped=0x0) returned 1 [0210.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.349] CloseHandle (hObject=0x1ec) returned 1 [0210.349] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.349] SetEndOfFile (hFile=0x1dc) returned 1 [0210.349] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.cat"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.cat.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.cat.vhd")) returned 1 [0210.354] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b017f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b017f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.inf", cAlternateFileName="")) returned 1 [0210.354] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0210.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.410] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.411] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.411] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0210.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5d7, lpOverlapped=0x0) returned 1 [0210.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5e0, lpOverlapped=0x0) returned 1 [0210.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.413] CloseHandle (hObject=0x1ec) returned 1 [0210.414] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.414] SetEndOfFile (hFile=0x1dc) returned 1 [0210.441] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.inf"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.inf.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.inf.vhd")) returned 1 [0210.442] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b2895, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b2895, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x4eb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 1 [0210.442] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6398 [0210.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6398 | out: hHeap=0x2830000) returned 1 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.574] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.574] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.574] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0210.575] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.575] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.575] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.575] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.576] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0210.576] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.576] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.576] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xeb0, lpOverlapped=0x0) returned 1 [0210.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff150, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xeb0, lpOverlapped=0x0) returned 1 [0210.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.648] CloseHandle (hObject=0x1ec) returned 1 [0210.648] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.648] SetEndOfFile (hFile=0x1dc) returned 1 [0210.664] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.sys"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\NXQuery.sys.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.sys.vhd")) returned 1 [0210.665] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b2895, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b2895, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x4eb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 0 [0210.665] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0210.665] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a652e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd240d8 [0210.667] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a652e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.667] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39b5b0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39b5b0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x16ebc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BiosBlocks.xml", cAlternateFileName="BIOSBL~1.XML")) returned 1 [0210.667] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\amd64\\biosblocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6348 [0210.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6348 | out: hHeap=0x2830000) returned 1 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.682] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0210.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xebc, lpOverlapped=0x0) returned 1 [0210.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff144, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xec0, lpOverlapped=0x0) returned 1 [0210.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.693] CloseHandle (hObject=0x1ec) returned 1 [0210.693] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.694] SetEndOfFile (hFile=0x1dc) returned 1 [0210.694] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\amd64\\biosblocks.xml"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\biosblocks.xml.vhd")) returned 1 [0210.695] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39c8ec, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39c8ec, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x11daf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwcompat.txt", cAlternateFileName="")) returned 1 [0210.695] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwcompat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.707] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6a80 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6a80 | out: hHeap=0x2830000) returned 1 [0210.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1daf, lpOverlapped=0x0) returned 1 [0210.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe251, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1db0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1db0, lpOverlapped=0x0) returned 1 [0210.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.744] CloseHandle (hObject=0x1ec) returned 1 [0210.744] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.744] SetEndOfFile (hFile=0x1dc) returned 1 [0210.744] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwcompat.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwcompat.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwcompat.txt.vhd")) returned 1 [0210.745] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39dcc9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39dcc9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x90d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwexclude.txt", cAlternateFileName="HWEXCL~1.TXT")) returned 1 [0210.745] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwexclude.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6468 [0210.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6468 | out: hHeap=0x2830000) returned 1 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.755] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.756] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0210.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x90d, lpOverlapped=0x0) returned 1 [0210.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6f3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x910, lpOverlapped=0x0) returned 1 [0210.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.758] CloseHandle (hObject=0x1ec) returned 1 [0210.758] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.758] SetEndOfFile (hFile=0x1dc) returned 1 [0210.758] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwexclude.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwexclude.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwexclude.txt.vhd")) returned 1 [0210.759] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39eff9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39eff9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x26b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.cat", cAlternateFileName="")) returned 1 [0210.759] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63b8 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63b8 | out: hHeap=0x2830000) returned 1 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.769] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0210.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6b6, lpOverlapped=0x0) returned 1 [0210.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff94a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0210.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.772] CloseHandle (hObject=0x1ec) returned 1 [0210.772] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.772] SetEndOfFile (hFile=0x1dc) returned 1 [0210.772] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.cat"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.cat.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.cat.vhd")) returned 1 [0210.773] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a3e27, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a3e27, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.inf", cAlternateFileName="")) returned 1 [0210.773] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6398 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6398 | out: hHeap=0x2830000) returned 1 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.796] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0210.797] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.797] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.798] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5d7, lpOverlapped=0x0) returned 1 [0210.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5e0, lpOverlapped=0x0) returned 1 [0210.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.798] CloseHandle (hObject=0x1ec) returned 1 [0210.799] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.799] SetEndOfFile (hFile=0x1dc) returned 1 [0210.800] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.inf"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.inf.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.inf.vhd")) returned 1 [0210.801] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a652e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a652e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 1 [0210.801] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.813] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836a18 | out: hHeap=0x2830000) returned 1 [0210.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6468 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6468 | out: hHeap=0x2830000) returned 1 [0210.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.814] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6a80 [0210.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.814] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.814] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6a80 | out: hHeap=0x2830000) returned 1 [0210.815] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.815] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10b0, lpOverlapped=0x0) returned 1 [0210.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10b0, lpOverlapped=0x0) returned 1 [0210.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.824] CloseHandle (hObject=0x1ec) returned 1 [0210.824] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.824] SetEndOfFile (hFile=0x1dc) returned 1 [0210.824] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.sys"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\NXQuery.sys.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.sys.vhd")) returned 1 [0210.825] FindNextFileW (in: hFindFile=0xd240d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a652e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a652e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 0 [0210.825] FindClose (in: hFindFile=0xd240d8 | out: hFindFile=0xd240d8) returned 1 [0210.825] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0210.826] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.826] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.826] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0210.827] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0210.827] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.827] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.827] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0210.827] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0210.827] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.827] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.827] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0210.827] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0210.828] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.828] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.828] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0210.828] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0210.828] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.828] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.828] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0210.828] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24098 [0210.834] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.834] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.834] FindClose (in: hFindFile=0xd24098 | out: hFindFile=0xd24098) returned 1 [0210.836] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0210.837] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.837] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.837] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0210.837] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0210.839] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.839] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0210.839] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0210.839] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0210.839] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0210.839] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0210.840] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0210.840] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.840] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0210.840] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0210.840] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0210.841] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.841] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0210.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde63e8 [0210.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3e) returned 0xde6768 [0210.841] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0210.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6358 [0210.841] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x42) returned 0xde6bc0 [0210.841] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0210.841] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0210.841] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0210.846] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.846] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0210.846] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0210.846] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0210.846] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0210.846] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0210.847] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0210.847] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.847] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0210.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6348 [0210.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836a18 [0210.847] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 0 [0210.848] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0210.848] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe96bf718, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe96bf718, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0210.848] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe96bf718, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe96bf718, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.848] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897a90d0, ftCreationTime.dwHighDateTime=0x1d5e826, ftLastAccessTime.dwLowDateTime=0xba050b70, ftLastAccessTime.dwHighDateTime=0x1d5e607, ftLastWriteTime.dwLowDateTime=0xba050b70, ftLastWriteTime.dwHighDateTime=0x1d5e607, nFileSizeHigh=0x0, nFileSizeLow=0xdc24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7SbMn.avi", cAlternateFileName="")) returned 1 [0210.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\7SbMn.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7sbmn.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0210.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6318 [0210.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6318 | out: hHeap=0x2830000) returned 1 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.861] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0210.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.863] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0210.863] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.863] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.863] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c24, lpOverlapped=0x0) returned 1 [0210.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe3dc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1c30, lpOverlapped=0x0) returned 1 [0210.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.867] CloseHandle (hObject=0x1ec) returned 1 [0210.867] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.867] SetEndOfFile (hFile=0x1dc) returned 1 [0210.867] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\7SbMn.avi" (normalized: "c:\\users\\fd1hvy\\videos\\7sbmn.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\7SbMn.avi.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\7sbmn.avi.vhd")) returned 1 [0210.868] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbdfe50, ftCreationTime.dwHighDateTime=0x1d5e770, ftLastAccessTime.dwLowDateTime=0x55ce7de0, ftLastAccessTime.dwHighDateTime=0x1d5e381, ftLastWriteTime.dwLowDateTime=0x55ce7de0, ftLastWriteTime.dwHighDateTime=0x1d5e381, nFileSizeHigh=0x0, nFileSizeLow=0x157ad, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B8_-Q2tPMnPISdQaE.flv", cAlternateFileName="B8_-Q2~1.FLV")) returned 1 [0210.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\B8_-Q2tPMnPISdQaE.flv" (normalized: "c:\\users\\fd1hvy\\videos\\b8_-q2tpmnpisdqae.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0210.878] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0210.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0210.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0210.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.879] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0210.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.881] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0210.881] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.881] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.881] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x17ad, lpOverlapped=0x0) returned 1 [0210.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe853, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x17b0, lpOverlapped=0x0) returned 1 [0210.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.888] CloseHandle (hObject=0x1ec) returned 1 [0210.889] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.889] SetEndOfFile (hFile=0x1dc) returned 1 [0210.897] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\B8_-Q2tPMnPISdQaE.flv" (normalized: "c:\\users\\fd1hvy\\videos\\b8_-q2tpmnpisdqae.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\B8_-Q2tPMnPISdQaE.flv.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\b8_-q2tpmnpisdqae.flv.vhd")) returned 1 [0210.898] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0210.898] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750a6cc0, ftCreationTime.dwHighDateTime=0x1d5e8c0, ftLastAccessTime.dwLowDateTime=0xe27c80f0, ftLastAccessTime.dwHighDateTime=0x1d5e5d6, ftLastWriteTime.dwLowDateTime=0xe27c80f0, ftLastWriteTime.dwHighDateTime=0x1d5e5d6, nFileSizeHigh=0x0, nFileSizeLow=0xb7d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="h556oYrQXlJdjKAfCp.mp4", cAlternateFileName="H556OY~1.MP4")) returned 1 [0210.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\h556oYrQXlJdjKAfCp.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h556oyrqxljdjkafcp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836ac8 [0210.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836ac8 | out: hHeap=0x2830000) returned 1 [0210.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0210.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0210.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.910] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0210.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0210.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x17d5, lpOverlapped=0x0) returned 1 [0210.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe82b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x17e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x17e0, lpOverlapped=0x0) returned 1 [0210.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.915] CloseHandle (hObject=0x1ec) returned 1 [0210.915] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.915] SetEndOfFile (hFile=0x1dc) returned 1 [0210.930] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\h556oYrQXlJdjKAfCp.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h556oyrqxljdjkafcp.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\h556oYrQXlJdjKAfCp.mp4.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\h556oyrqxljdjkafcp.mp4.vhd")) returned 1 [0210.931] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c264930, ftCreationTime.dwHighDateTime=0x1d5e4c6, ftLastAccessTime.dwLowDateTime=0x64335a80, ftLastAccessTime.dwHighDateTime=0x1d5e945, ftLastWriteTime.dwLowDateTime=0x64335a80, ftLastWriteTime.dwHighDateTime=0x1d5e945, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ikaj0d1McV94JL", cAlternateFileName="IKAJ0D~1")) returned 1 [0210.931] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6308 [0210.931] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4c) returned 0x2836ac8 [0210.931] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3705e90, ftCreationTime.dwHighDateTime=0x1d5e18a, ftLastAccessTime.dwLowDateTime=0x2519e10, ftLastAccessTime.dwHighDateTime=0x1d5e2bc, ftLastWriteTime.dwLowDateTime=0x2519e10, ftLastWriteTime.dwHighDateTime=0x1d5e2bc, nFileSizeHigh=0x0, nFileSizeLow=0x5b52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XfefzmNn-y.avi", cAlternateFileName="XFEFZM~1.AVI")) returned 1 [0210.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\XfefzmNn-y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\xfefzmnn-y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0x2836b78 [0210.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0x2836b78 | out: hHeap=0x2830000) returned 1 [0210.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde7310 [0210.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde62e8 [0210.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7310 | out: hHeap=0x2830000) returned 1 [0210.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde62e8 | out: hHeap=0x2830000) returned 1 [0210.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.940] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0210.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde71a8 [0210.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde73b8 [0210.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73b8 | out: hHeap=0x2830000) returned 1 [0210.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0210.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1b52, lpOverlapped=0x0) returned 1 [0210.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe4ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1b60, lpOverlapped=0x0) returned 1 [0210.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.943] CloseHandle (hObject=0x1ec) returned 1 [0210.943] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.943] SetEndOfFile (hFile=0x1dc) returned 1 [0210.959] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\XfefzmNn-y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\xfefzmnn-y.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\XfefzmNn-y.avi.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\xfefzmnn-y.avi.vhd")) returned 1 [0210.961] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d5fb00, ftCreationTime.dwHighDateTime=0x1d5eca7, ftLastAccessTime.dwLowDateTime=0xc2f86880, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0xc2f86880, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_m3uD9cpY6-UC", cAlternateFileName="_M3UD9~1")) returned 1 [0210.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6458 [0210.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0x2836b78 [0210.961] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d5fb00, ftCreationTime.dwHighDateTime=0x1d5eca7, ftLastAccessTime.dwLowDateTime=0xc2f86880, ftLastAccessTime.dwHighDateTime=0x1d5e7c9, ftLastWriteTime.dwLowDateTime=0xc2f86880, ftLastWriteTime.dwHighDateTime=0x1d5e7c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_m3uD9cpY6-UC", cAlternateFileName="_M3UD9~1")) returned 0 [0210.961] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0210.961] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24398 [0210.961] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.962] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0210.962] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0210.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.962] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0210.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.963] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0210.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0210.979] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0210.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0210.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0210.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0210.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0210.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.980] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0210.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0210.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0210.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0210.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0210.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x357, lpOverlapped=0x0) returned 1 [0210.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffca9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x360, lpOverlapped=0x0) returned 1 [0210.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.982] CloseHandle (hObject=0x1ec) returned 1 [0210.983] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.983] SetEndOfFile (hFile=0x1dc) returned 1 [0210.983] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), lpNewFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.vhd" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.vhd")) returned 1 [0210.984] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 0 [0210.984] FindClose (in: hFindFile=0xd24398 | out: hFindFile=0xd24398) returned 1 [0210.984] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0210.984] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.984] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0210.984] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0210.984] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0210.984] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe9731db9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9731db9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0210.984] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe9731db9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9731db9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.985] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe36a7c0, ftCreationTime.dwHighDateTime=0x1d5e4a1, ftLastAccessTime.dwLowDateTime=0xbecd5850, ftLastAccessTime.dwHighDateTime=0x1d5f0d0, ftLastWriteTime.dwLowDateTime=0xbecd5850, ftLastWriteTime.dwHighDateTime=0x1d5f0d0, nFileSizeHigh=0x0, nFileSizeLow=0x20a2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0utO-Cb0IrhpT.jpg", cAlternateFileName="0UTO-C~1.JPG")) returned 1 [0210.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0utO-Cb0IrhpT.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0uto-cb0irhpt.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0210.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0210.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0210.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0210.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b80 [0210.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b80 | out: hHeap=0x2830000) returned 1 [0210.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0210.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6468 [0210.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0210.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6468 | out: hHeap=0x2830000) returned 1 [0210.996] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.996] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.996] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0210.996] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0210.996] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0210.996] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0210.996] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0210.996] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.997] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0210.997] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0210.997] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0210.997] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0210.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0210.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0210.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa2, lpOverlapped=0x0) returned 1 [0210.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff5e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0210.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb0, lpOverlapped=0x0) returned 1 [0210.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0210.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0210.999] CloseHandle (hObject=0x1ec) returned 1 [0210.999] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0210.999] SetEndOfFile (hFile=0x1dc) returned 1 [0210.999] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\0utO-Cb0IrhpT.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0uto-cb0irhpt.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\0utO-Cb0IrhpT.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\0uto-cb0irhpt.jpg.vhd")) returned 1 [0211.000] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0182f0, ftCreationTime.dwHighDateTime=0x1d5ed76, ftLastAccessTime.dwLowDateTime=0x148f39b0, ftLastAccessTime.dwHighDateTime=0x1d5e65f, ftLastWriteTime.dwLowDateTime=0x148f39b0, ftLastWriteTime.dwHighDateTime=0x1d5e65f, nFileSizeHigh=0x0, nFileSizeLow=0x161ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1NelO0sVjmQO -1u.bmp", cAlternateFileName="1NELO0~1.BMP")) returned 1 [0211.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\1NelO0sVjmQO -1u.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\1nelo0svjmqo -1u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.014] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.014] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0211.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0211.014] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.014] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0211.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0211.014] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.014] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0211.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0211.016] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ce, lpOverlapped=0x0) returned 1 [0211.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d0, lpOverlapped=0x0) returned 1 [0211.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.022] CloseHandle (hObject=0x1ec) returned 1 [0211.022] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.022] SetEndOfFile (hFile=0x1dc) returned 1 [0211.032] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\1NelO0sVjmQO -1u.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\1nelo0svjmqo -1u.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\1NelO0sVjmQO -1u.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\1nelo0svjmqo -1u.bmp.vhd")) returned 1 [0211.033] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59da190, ftCreationTime.dwHighDateTime=0x1d5ee15, ftLastAccessTime.dwLowDateTime=0xe273b4f0, ftLastAccessTime.dwHighDateTime=0x1d5ec45, ftLastWriteTime.dwLowDateTime=0xe273b4f0, ftLastWriteTime.dwHighDateTime=0x1d5ec45, nFileSizeHigh=0x0, nFileSizeLow=0x20bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="22bRcrdoRxTtL_k.png", cAlternateFileName="22BRCR~1.PNG")) returned 1 [0211.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\22bRcrdoRxTtL_k.png" (normalized: "c:\\users\\fd1hvy\\pictures\\22brcrdorxttl_k.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.043] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7e40 [0211.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7e40 | out: hHeap=0x2830000) returned 1 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0211.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.043] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.044] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.044] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.045] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0211.045] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.045] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.045] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbd, lpOverlapped=0x0) returned 1 [0211.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff43, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc0, lpOverlapped=0x0) returned 1 [0211.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.046] CloseHandle (hObject=0x1ec) returned 1 [0211.047] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.047] SetEndOfFile (hFile=0x1dc) returned 1 [0211.056] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\22bRcrdoRxTtL_k.png" (normalized: "c:\\users\\fd1hvy\\pictures\\22brcrdorxttl_k.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\22bRcrdoRxTtL_k.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\22brcrdorxttl_k.png.vhd")) returned 1 [0211.057] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f03b0, ftCreationTime.dwHighDateTime=0x1d5ea8d, ftLastAccessTime.dwLowDateTime=0xee4ca970, ftLastAccessTime.dwHighDateTime=0x1d5ef3e, ftLastWriteTime.dwLowDateTime=0xee4ca970, ftLastWriteTime.dwHighDateTime=0x1d5ef3e, nFileSizeHigh=0x0, nFileSizeLow=0x1992, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2JiC-pEkmKZkqOwS.gif", cAlternateFileName="2JIC-P~1.GIF")) returned 1 [0211.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2JiC-pEkmKZkqOwS.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\2jic-pekmkzkqows.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b80 [0211.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b80 | out: hHeap=0x2830000) returned 1 [0211.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0211.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0211.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.067] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0211.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.068] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0211.068] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.068] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.068] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1992, lpOverlapped=0x0) returned 1 [0211.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe66e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19a0, lpOverlapped=0x0) returned 1 [0211.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.073] CloseHandle (hObject=0x1ec) returned 1 [0211.073] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.073] SetEndOfFile (hFile=0x1dc) returned 1 [0211.083] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\2JiC-pEkmKZkqOwS.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\2jic-pekmkzkqows.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\2JiC-pEkmKZkqOwS.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\2jic-pekmkzkqows.gif.vhd")) returned 1 [0211.084] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb309a620, ftCreationTime.dwHighDateTime=0x1d5ef6f, ftLastAccessTime.dwLowDateTime=0x900d3d20, ftLastAccessTime.dwHighDateTime=0x1d5e5ac, ftLastWriteTime.dwLowDateTime=0x900d3d20, ftLastWriteTime.dwHighDateTime=0x1d5e5ac, nFileSizeHigh=0x0, nFileSizeLow=0x9503, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6HZqTyjLJHH.jpg", cAlternateFileName="6HZQTY~1.JPG")) returned 1 [0211.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\6HZqTyjLJHH.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\6hzqtyjljhh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0211.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6478 [0211.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6478 | out: hHeap=0x2830000) returned 1 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.094] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0211.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1503, lpOverlapped=0x0) returned 1 [0211.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeafd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1510, lpOverlapped=0x0) returned 1 [0211.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.099] CloseHandle (hObject=0x1ec) returned 1 [0211.099] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.099] SetEndOfFile (hFile=0x1dc) returned 1 [0211.107] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\6HZqTyjLJHH.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\6hzqtyjljhh.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\6HZqTyjLJHH.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\6hzqtyjljhh.jpg.vhd")) returned 1 [0211.108] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795843e0, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0xef825690, ftLastAccessTime.dwHighDateTime=0x1d5ef7b, ftLastWriteTime.dwLowDateTime=0xef825690, ftLastWriteTime.dwHighDateTime=0x1d5ef7b, nFileSizeHigh=0x0, nFileSizeLow=0xd07a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7fnvRVOrsS4tLj.gif", cAlternateFileName="7FNVRV~1.GIF")) returned 1 [0211.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\7fnvRVOrsS4tLj.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\7fnvrvorss4tlj.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0211.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63c8 [0211.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63c8 | out: hHeap=0x2830000) returned 1 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.119] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6a80 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.121] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6a80 | out: hHeap=0x2830000) returned 1 [0211.121] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.121] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.121] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x107a, lpOverlapped=0x0) returned 1 [0211.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1080, lpOverlapped=0x0) returned 1 [0211.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.125] CloseHandle (hObject=0x1ec) returned 1 [0211.125] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.125] SetEndOfFile (hFile=0x1dc) returned 1 [0211.163] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\7fnvRVOrsS4tLj.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\7fnvrvorss4tlj.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\7fnvRVOrsS4tLj.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\7fnvrvorss4tlj.gif.vhd")) returned 1 [0211.164] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0211.164] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6398 [0211.164] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0xde7a20 [0211.164] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5750b5d0, ftCreationTime.dwHighDateTime=0x1d5e3e9, ftLastAccessTime.dwLowDateTime=0x814730e0, ftLastAccessTime.dwHighDateTime=0x1d5e25d, ftLastWriteTime.dwLowDateTime=0x814730e0, ftLastWriteTime.dwHighDateTime=0x1d5e25d, nFileSizeHigh=0x0, nFileSizeLow=0x8065, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cWQyFGsx2CXQp0 Z-83.png", cAlternateFileName="CWQYFG~1.PNG")) returned 1 [0211.164] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\cWQyFGsx2CXQp0 Z-83.png" (normalized: "c:\\users\\fd1hvy\\pictures\\cwqyfgsx2cxqp0 z-83.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0211.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6318 [0211.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6318 | out: hHeap=0x2830000) returned 1 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.174] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.175] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.176] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0211.176] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.176] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.176] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x65, lpOverlapped=0x0) returned 1 [0211.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff9b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x70, lpOverlapped=0x0) returned 1 [0211.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.197] CloseHandle (hObject=0x1ec) returned 1 [0211.198] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.198] SetEndOfFile (hFile=0x1dc) returned 1 [0211.252] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\cWQyFGsx2CXQp0 Z-83.png" (normalized: "c:\\users\\fd1hvy\\pictures\\cwqyfgsx2cxqp0 z-83.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\cWQyFGsx2CXQp0 Z-83.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\cwqyfgsx2cxqp0 z-83.png.vhd")) returned 1 [0211.254] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.254] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5872dc20, ftCreationTime.dwHighDateTime=0x1d5eb93, ftLastAccessTime.dwLowDateTime=0xfa757660, ftLastAccessTime.dwHighDateTime=0x1d5e628, ftLastWriteTime.dwLowDateTime=0xfa757660, ftLastWriteTime.dwHighDateTime=0x1d5e628, nFileSizeHigh=0x0, nFileSizeLow=0x8f07, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ftfakgoz8e0uCSlY.gif", cAlternateFileName="FTFAKG~1.GIF")) returned 1 [0211.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ftfakgoz8e0uCSlY.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\ftfakgoz8e0ucsly.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b80 [0211.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b80 | out: hHeap=0x2830000) returned 1 [0211.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6408 [0211.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6408 | out: hHeap=0x2830000) returned 1 [0211.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.270] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0211.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.271] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0211.271] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.272] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf07, lpOverlapped=0x0) returned 1 [0211.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0f9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf10, lpOverlapped=0x0) returned 1 [0211.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.298] CloseHandle (hObject=0x1ec) returned 1 [0211.298] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.298] SetEndOfFile (hFile=0x1dc) returned 1 [0211.310] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Ftfakgoz8e0uCSlY.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\ftfakgoz8e0ucsly.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Ftfakgoz8e0uCSlY.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\ftfakgoz8e0ucsly.gif.vhd")) returned 1 [0211.316] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb40d0, ftCreationTime.dwHighDateTime=0x1d5e0ed, ftLastAccessTime.dwLowDateTime=0x1293740, ftLastAccessTime.dwHighDateTime=0x1d5e678, ftLastWriteTime.dwLowDateTime=0x1293740, ftLastWriteTime.dwHighDateTime=0x1d5e678, nFileSizeHigh=0x0, nFileSizeLow=0x8c60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G4kepZi6b5Bh7-ZWHf.png", cAlternateFileName="G4KEPZ~1.PNG")) returned 1 [0211.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\G4kepZi6b5Bh7-ZWHf.png" (normalized: "c:\\users\\fd1hvy\\pictures\\g4kepzi6b5bh7-zwhf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0211.328] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0211.328] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde62e8 [0211.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde62e8 | out: hHeap=0x2830000) returned 1 [0211.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.329] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0211.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.329] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.330] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0211.330] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.330] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.330] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc60, lpOverlapped=0x0) returned 1 [0211.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff3a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc60, lpOverlapped=0x0) returned 1 [0211.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.337] CloseHandle (hObject=0x1ec) returned 1 [0211.337] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.337] SetEndOfFile (hFile=0x1dc) returned 1 [0211.340] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\G4kepZi6b5Bh7-ZWHf.png" (normalized: "c:\\users\\fd1hvy\\pictures\\g4kepzi6b5bh7-zwhf.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\G4kepZi6b5Bh7-ZWHf.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\g4kepzi6b5bh7-zwhf.png.vhd")) returned 1 [0211.341] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1205c230, ftCreationTime.dwHighDateTime=0x1d5e82c, ftLastAccessTime.dwLowDateTime=0x1367b080, ftLastAccessTime.dwHighDateTime=0x1d5e529, ftLastWriteTime.dwLowDateTime=0x1367b080, ftLastWriteTime.dwHighDateTime=0x1d5e529, nFileSizeHigh=0x0, nFileSizeLow=0x156d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="l6xj6lm6K.jpg", cAlternateFileName="L6XJ6L~1.JPG")) returned 1 [0211.341] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\l6xj6lm6K.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\l6xj6lm6k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0211.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0211.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde62e8 [0211.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde62e8 | out: hHeap=0x2830000) returned 1 [0211.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.352] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0211.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0211.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16d0, lpOverlapped=0x0) returned 1 [0211.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe930, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16d0, lpOverlapped=0x0) returned 1 [0211.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.357] CloseHandle (hObject=0x1ec) returned 1 [0211.358] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.358] SetEndOfFile (hFile=0x1dc) returned 1 [0211.369] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\l6xj6lm6K.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\l6xj6lm6k.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\l6xj6lm6K.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\l6xj6lm6k.jpg.vhd")) returned 1 [0211.370] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99cc42b0, ftCreationTime.dwHighDateTime=0x1d5ee81, ftLastAccessTime.dwLowDateTime=0xd72bf1d0, ftLastAccessTime.dwHighDateTime=0x1d5eb9a, ftLastWriteTime.dwLowDateTime=0xd72bf1d0, ftLastWriteTime.dwHighDateTime=0x1d5eb9a, nFileSizeHigh=0x0, nFileSizeLow=0x12555, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M6gJ7oKi K T-90yh.png", cAlternateFileName="M6GJ7O~1.PNG")) returned 1 [0211.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\M6gJ7oKi K T-90yh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\m6gj7oki k t-90yh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0211.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0211.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6328 [0211.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6328 | out: hHeap=0x2830000) returned 1 [0211.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.382] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0211.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0211.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x555, lpOverlapped=0x0) returned 1 [0211.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffaab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x560, lpOverlapped=0x0) returned 1 [0211.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.389] CloseHandle (hObject=0x1ec) returned 1 [0211.389] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.389] SetEndOfFile (hFile=0x1dc) returned 1 [0211.398] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\M6gJ7oKi K T-90yh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\m6gj7oki k t-90yh.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\M6gJ7oKi K T-90yh.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\m6gj7oki k t-90yh.png.vhd")) returned 1 [0211.399] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4bdd8a0, ftCreationTime.dwHighDateTime=0x1d5edb6, ftLastAccessTime.dwLowDateTime=0x4e2c73b0, ftLastAccessTime.dwHighDateTime=0x1d5e135, ftLastWriteTime.dwLowDateTime=0x4e2c73b0, ftLastWriteTime.dwHighDateTime=0x1d5e135, nFileSizeHigh=0x0, nFileSizeLow=0xddc7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m766nsLLMFrdK3LPX8n.jpg", cAlternateFileName="M766NS~1.JPG")) returned 1 [0211.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\m766nsLLMFrdK3LPX8n.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\m766nsllmfrdk3lpx8n.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ad0 [0211.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ad0 | out: hHeap=0x2830000) returned 1 [0211.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63c8 [0211.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63c8 | out: hHeap=0x2830000) returned 1 [0211.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.408] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0211.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0211.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1dc7, lpOverlapped=0x0) returned 1 [0211.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe239, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1dd0, lpOverlapped=0x0) returned 1 [0211.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.415] CloseHandle (hObject=0x1ec) returned 1 [0211.415] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.415] SetEndOfFile (hFile=0x1dc) returned 1 [0211.428] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\m766nsLLMFrdK3LPX8n.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\m766nsllmfrdk3lpx8n.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\m766nsLLMFrdK3LPX8n.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\m766nsllmfrdk3lpx8n.jpg.vhd")) returned 1 [0211.434] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336713e0, ftCreationTime.dwHighDateTime=0x1d5ea0f, ftLastAccessTime.dwLowDateTime=0xe9370e20, ftLastAccessTime.dwHighDateTime=0x1d5ed00, ftLastWriteTime.dwLowDateTime=0xe9370e20, ftLastWriteTime.dwHighDateTime=0x1d5ed00, nFileSizeHigh=0x0, nFileSizeLow=0x13f1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MC0P9viIhz4tTLn7sK.bmp", cAlternateFileName="MC0P9V~1.BMP")) returned 1 [0211.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MC0P9viIhz4tTLn7sK.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mc0p9viihz4ttln7sk.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0211.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6328 [0211.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6328 | out: hHeap=0x2830000) returned 1 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.449] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.449] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6a80 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.449] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.450] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6a80 | out: hHeap=0x2830000) returned 1 [0211.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1f1f, lpOverlapped=0x0) returned 1 [0211.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe0e1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f20, lpOverlapped=0x0) returned 1 [0211.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.456] CloseHandle (hObject=0x1ec) returned 1 [0211.456] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.456] SetEndOfFile (hFile=0x1dc) returned 1 [0211.469] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\MC0P9viIhz4tTLn7sK.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mc0p9viihz4ttln7sk.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\MC0P9viIhz4tTLn7sK.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\mc0p9viihz4ttln7sk.bmp.vhd")) returned 1 [0211.471] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa59298f0, ftCreationTime.dwHighDateTime=0x1d5e0b8, ftLastAccessTime.dwLowDateTime=0xc664eb30, ftLastAccessTime.dwHighDateTime=0x1d5eb19, ftLastWriteTime.dwLowDateTime=0xc664eb30, ftLastWriteTime.dwHighDateTime=0x1d5eb19, nFileSizeHigh=0x0, nFileSizeLow=0xe5e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pXOQCPtqt j88AA.png", cAlternateFileName="PXOQCP~1.PNG")) returned 1 [0211.471] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\pXOQCPtqt j88AA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pxoqcptqt j88aa.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0211.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0211.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde64a8 [0211.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde64a8 | out: hHeap=0x2830000) returned 1 [0211.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.490] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0211.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.490] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.490] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0211.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5e8, lpOverlapped=0x0) returned 1 [0211.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5f0, lpOverlapped=0x0) returned 1 [0211.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.538] CloseHandle (hObject=0x1ec) returned 1 [0211.538] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.538] SetEndOfFile (hFile=0x1dc) returned 1 [0211.549] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\pXOQCPtqt j88AA.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pxoqcptqt j88aa.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\pXOQCPtqt j88AA.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\pxoqcptqt j88aa.png.vhd")) returned 1 [0211.550] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0211.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde63b8 [0211.550] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b80 [0211.550] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22af6750, ftCreationTime.dwHighDateTime=0x1d5ed43, ftLastAccessTime.dwLowDateTime=0xc3b3d750, ftLastAccessTime.dwHighDateTime=0x1d5e189, ftLastWriteTime.dwLowDateTime=0xc3b3d750, ftLastWriteTime.dwHighDateTime=0x1d5e189, nFileSizeHigh=0x0, nFileSizeLow=0xa969, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uM-SMIj.png", cAlternateFileName="")) returned 1 [0211.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\uM-SMIj.png" (normalized: "c:\\users\\fd1hvy\\pictures\\um-smij.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0211.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63c8 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63c8 | out: hHeap=0x2830000) returned 1 [0211.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.562] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0211.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0211.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x969, lpOverlapped=0x0) returned 1 [0211.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff697, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x970, lpOverlapped=0x0) returned 1 [0211.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.566] CloseHandle (hObject=0x1ec) returned 1 [0211.566] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.566] SetEndOfFile (hFile=0x1dc) returned 1 [0211.583] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\uM-SMIj.png" (normalized: "c:\\users\\fd1hvy\\pictures\\um-smij.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\uM-SMIj.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\um-smij.png.vhd")) returned 1 [0211.584] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64360620, ftCreationTime.dwHighDateTime=0x1d5edc5, ftLastAccessTime.dwLowDateTime=0x59f69e90, ftLastAccessTime.dwHighDateTime=0x1d5e604, ftLastWriteTime.dwLowDateTime=0x59f69e90, ftLastWriteTime.dwHighDateTime=0x1d5e604, nFileSizeHigh=0x0, nFileSizeLow=0x3ede, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wc_rlp8KdXl.bmp", cAlternateFileName="WC_RLP~1.BMP")) returned 1 [0211.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\wc_rlp8KdXl.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\wc_rlp8kdxl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0211.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0211.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6318 [0211.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6318 | out: hHeap=0x2830000) returned 1 [0211.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.601] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0211.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.602] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0211.603] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ede, lpOverlapped=0x0) returned 1 [0211.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe122, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ee0, lpOverlapped=0x0) returned 1 [0211.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.605] CloseHandle (hObject=0x1ec) returned 1 [0211.605] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.605] SetEndOfFile (hFile=0x1dc) returned 1 [0211.612] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\wc_rlp8KdXl.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\wc_rlp8kdxl.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\wc_rlp8KdXl.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\wc_rlp8kdxl.bmp.vhd")) returned 1 [0211.613] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337fe660, ftCreationTime.dwHighDateTime=0x1d5e1e8, ftLastAccessTime.dwLowDateTime=0xc295dbf0, ftLastAccessTime.dwHighDateTime=0x1d5e280, ftLastWriteTime.dwLowDateTime=0xc295dbf0, ftLastWriteTime.dwHighDateTime=0x1d5e280, nFileSizeHigh=0x0, nFileSizeLow=0xd26a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XqQQ-Yr 51ME.jpg", cAlternateFileName="XQQQ-Y~1.JPG")) returned 1 [0211.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\XqQQ-Yr 51ME.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\xqqq-yr 51me.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0211.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63c8 [0211.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63c8 | out: hHeap=0x2830000) returned 1 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.631] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.632] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0211.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x126a, lpOverlapped=0x0) returned 1 [0211.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed96, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1270, lpOverlapped=0x0) returned 1 [0211.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.640] CloseHandle (hObject=0x1ec) returned 1 [0211.640] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.640] SetEndOfFile (hFile=0x1dc) returned 1 [0211.678] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\XqQQ-Yr 51ME.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\xqqq-yr 51me.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\XqQQ-Yr 51ME.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\xqqq-yr 51me.jpg.vhd")) returned 1 [0211.679] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd10fb310, ftCreationTime.dwHighDateTime=0x1d5e0e4, ftLastAccessTime.dwLowDateTime=0x2500f870, ftLastAccessTime.dwHighDateTime=0x1d5e10e, ftLastWriteTime.dwLowDateTime=0x2500f870, ftLastWriteTime.dwHighDateTime=0x1d5e10e, nFileSizeHigh=0x0, nFileSizeLow=0x14de0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y8bRUGb3U-LQ D.bmp", cAlternateFileName="Y8BRUG~1.BMP")) returned 1 [0211.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\y8bRUGb3U-LQ D.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\y8brugb3u-lq d.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0211.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6318 [0211.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6318 | out: hHeap=0x2830000) returned 1 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.707] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0211.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0211.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xde0, lpOverlapped=0x0) returned 1 [0211.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff220, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xde0, lpOverlapped=0x0) returned 1 [0211.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.716] CloseHandle (hObject=0x1ec) returned 1 [0211.716] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.716] SetEndOfFile (hFile=0x1dc) returned 1 [0211.752] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\y8bRUGb3U-LQ D.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\y8brugb3u-lq d.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\y8bRUGb3U-LQ D.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\y8brugb3u-lq d.bmp.vhd")) returned 1 [0211.753] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cdd4710, ftCreationTime.dwHighDateTime=0x1d5e20f, ftLastAccessTime.dwLowDateTime=0x9ad148e0, ftLastAccessTime.dwHighDateTime=0x1d5f0ed, ftLastWriteTime.dwLowDateTime=0x9ad148e0, ftLastWriteTime.dwHighDateTime=0x1d5f0ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YPIKZu1j-", cAlternateFileName="YPIKZU~1")) returned 1 [0211.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde62e8 [0211.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x46) returned 0xde6a80 [0211.753] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95ed02f0, ftCreationTime.dwHighDateTime=0x1d5e48c, ftLastAccessTime.dwLowDateTime=0x7f7a16a0, ftLastAccessTime.dwHighDateTime=0x1d5ee11, ftLastWriteTime.dwLowDateTime=0x7f7a16a0, ftLastWriteTime.dwHighDateTime=0x1d5ee11, nFileSizeHigh=0x0, nFileSizeLow=0x1582f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZTgCgJxa.bmp", cAlternateFileName="")) returned 1 [0211.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZTgCgJxa.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ztgcgjxa.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6318 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6318 | out: hHeap=0x2830000) returned 1 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.764] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.766] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0211.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.766] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.766] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x182f, lpOverlapped=0x0) returned 1 [0211.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe7d1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1830, lpOverlapped=0x0) returned 1 [0211.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.771] CloseHandle (hObject=0x1ec) returned 1 [0211.771] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.771] SetEndOfFile (hFile=0x1dc) returned 1 [0211.798] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ZTgCgJxa.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ztgcgjxa.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ZTgCgJxa.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\ztgcgjxa.bmp.vhd")) returned 1 [0211.799] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95ed02f0, ftCreationTime.dwHighDateTime=0x1d5e48c, ftLastAccessTime.dwLowDateTime=0x7f7a16a0, ftLastAccessTime.dwHighDateTime=0x1d5ee11, ftLastWriteTime.dwLowDateTime=0x7f7a16a0, ftLastWriteTime.dwHighDateTime=0x1d5ee11, nFileSizeHigh=0x0, nFileSizeLow=0x1582f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZTgCgJxa.bmp", cAlternateFileName="")) returned 0 [0211.799] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0211.799] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0211.804] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.804] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.805] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0211.805] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe90a3645, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe90a3645, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0211.805] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe90a3645, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe90a3645, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7032e6c0, ftCreationTime.dwHighDateTime=0x1d5e841, ftLastAccessTime.dwLowDateTime=0xc428cd10, ftLastAccessTime.dwHighDateTime=0x1d5ebf9, ftLastWriteTime.dwLowDateTime=0xc428cd10, ftLastWriteTime.dwHighDateTime=0x1d5ebf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6fl4 qpAiGmDmlEHbQI", cAlternateFileName="6FL4QP~1")) returned 1 [0211.805] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde63c8 [0211.805] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1a00 [0211.805] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf206440, ftCreationTime.dwHighDateTime=0x1d5f0ff, ftLastAccessTime.dwLowDateTime=0x80327750, ftLastAccessTime.dwHighDateTime=0x1d5e654, ftLastWriteTime.dwLowDateTime=0x80327750, ftLastWriteTime.dwHighDateTime=0x1d5e654, nFileSizeHigh=0x0, nFileSizeLow=0x4592, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f-MWq.m4a", cAlternateFileName="")) returned 1 [0211.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\f-MWq.m4a" (normalized: "c:\\users\\fd1hvy\\music\\f-mwq.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.820] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0211.822] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x592, lpOverlapped=0x0) returned 1 [0211.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa6e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5a0, lpOverlapped=0x0) returned 1 [0211.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.831] CloseHandle (hObject=0x1ec) returned 1 [0211.832] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.832] SetEndOfFile (hFile=0x1dc) returned 1 [0211.842] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\f-MWq.m4a" (normalized: "c:\\users\\fd1hvy\\music\\f-mwq.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\f-MWq.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\music\\f-mwq.m4a.vhd")) returned 1 [0211.843] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53962b0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x1d6a5ee0, ftLastAccessTime.dwHighDateTime=0x1d5e202, ftLastWriteTime.dwLowDateTime=0x1d6a5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e202, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msisV", cAlternateFileName="")) returned 1 [0211.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6318 [0211.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x38) returned 0xde5db0 [0211.843] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300399d0, ftCreationTime.dwHighDateTime=0x1d5e72b, ftLastAccessTime.dwLowDateTime=0xccb47760, ftLastAccessTime.dwHighDateTime=0x1d5f01b, ftLastWriteTime.dwLowDateTime=0xccb47760, ftLastWriteTime.dwHighDateTime=0x1d5f01b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SRKHED4kq8ONu21EkVD", cAlternateFileName="SRKHED~1")) returned 1 [0211.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6328 [0211.843] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x54) returned 0xde1b80 [0211.843] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13f8d20, ftCreationTime.dwHighDateTime=0x1d5e81f, ftLastAccessTime.dwLowDateTime=0xb6fb3e00, ftLastAccessTime.dwHighDateTime=0x1d5e2be, ftLastWriteTime.dwLowDateTime=0xb6fb3e00, ftLastWriteTime.dwHighDateTime=0x1d5e2be, nFileSizeHigh=0x0, nFileSizeLow=0xdd1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Z3MJK NVLrSqLRe.m4a", cAlternateFileName="Z3MJKN~1.M4A")) returned 1 [0211.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\Z3MJK NVLrSqLRe.m4a" (normalized: "c:\\users\\fd1hvy\\music\\z3mjk nvlrsqlre.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.853] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.853] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.853] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0211.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0211.853] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.853] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0211.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0211.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0211.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.856] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0211.856] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.856] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.856] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1d1b, lpOverlapped=0x0) returned 1 [0211.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe2e5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d20, lpOverlapped=0x0) returned 1 [0211.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.860] CloseHandle (hObject=0x1ec) returned 1 [0211.860] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.860] SetEndOfFile (hFile=0x1dc) returned 1 [0211.870] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\Z3MJK NVLrSqLRe.m4a" (normalized: "c:\\users\\fd1hvy\\music\\z3mjk nvlrsqlre.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\Z3MJK NVLrSqLRe.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\music\\z3mjk nvlrsqlre.m4a.vhd")) returned 1 [0211.871] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13f8d20, ftCreationTime.dwHighDateTime=0x1d5e81f, ftLastAccessTime.dwLowDateTime=0xb6fb3e00, ftLastAccessTime.dwHighDateTime=0x1d5e2be, ftLastWriteTime.dwLowDateTime=0xb6fb3e00, ftLastWriteTime.dwHighDateTime=0x1d5e2be, nFileSizeHigh=0x0, nFileSizeLow=0xdd1b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Z3MJK NVLrSqLRe.m4a", cAlternateFileName="Z3MJKN~1.M4A")) returned 0 [0211.871] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0211.871] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0211.871] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.871] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.871] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0211.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0211.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0211.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.882] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0211.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.883] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.883] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.883] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0211.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1f5, lpOverlapped=0x0) returned 1 [0211.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x200, lpOverlapped=0x0) returned 1 [0211.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.893] CloseHandle (hObject=0x1ec) returned 1 [0211.894] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.894] SetEndOfFile (hFile=0x1dc) returned 1 [0211.894] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.vhd" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk.vhd")) returned 1 [0211.895] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0211.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.905] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.905] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7708 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7708 | out: hHeap=0x2830000) returned 1 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.906] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.906] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.908] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0211.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.908] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.908] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3ae, lpOverlapped=0x0) returned 1 [0211.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3b0, lpOverlapped=0x0) returned 1 [0211.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.909] CloseHandle (hObject=0x1ec) returned 1 [0211.909] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.909] SetEndOfFile (hFile=0x1dc) returned 1 [0211.909] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.vhd" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk.vhd")) returned 1 [0211.910] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0211.910] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.923] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.923] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.923] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0211.923] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0211.923] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.923] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6408 [0211.923] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.923] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.923] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6408 | out: hHeap=0x2830000) returned 1 [0211.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.924] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0211.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.925] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0211.925] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.925] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.925] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x53a, lpOverlapped=0x0) returned 1 [0211.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffac6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x540, lpOverlapped=0x0) returned 1 [0211.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.926] CloseHandle (hObject=0x1ec) returned 1 [0211.926] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.926] SetEndOfFile (hFile=0x1dc) returned 1 [0211.927] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.vhd" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk.vhd")) returned 1 [0211.927] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0 [0211.928] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0211.928] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24358 [0211.928] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.928] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0211.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7708 [0211.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7708 | out: hHeap=0x2830000) returned 1 [0211.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8318 [0211.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0211.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0211.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.962] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0211.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8318 [0211.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8318 | out: hHeap=0x2830000) returned 1 [0211.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0211.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd0, lpOverlapped=0x0) returned 1 [0211.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd0, lpOverlapped=0x0) returned 1 [0211.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.966] CloseHandle (hObject=0x1ec) returned 1 [0211.966] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.966] SetEndOfFile (hFile=0x1dc) returned 1 [0211.966] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), lpNewFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url.vhd" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url.vhd")) returned 1 [0211.967] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.967] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0211.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6478 [0211.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x40) returned 0xde8418 [0211.967] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0 [0211.967] FindClose (in: hFindFile=0xd24358 | out: hFindFile=0xd24358) returned 1 [0211.968] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0211.968] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.968] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.968] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.968] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0211.968] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe76cd73d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe76cd73d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0211.968] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe76cd73d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe76cd73d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.968] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18af5640, ftCreationTime.dwHighDateTime=0x1d597b0, ftLastAccessTime.dwLowDateTime=0x479d8ed0, ftLastAccessTime.dwHighDateTime=0x1d56df9, ftLastWriteTime.dwLowDateTime=0x479d8ed0, ftLastWriteTime.dwHighDateTime=0x1d56df9, nFileSizeHigh=0x0, nFileSizeLow=0x7eb8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0MnKlPhrLjEh.xlsx", cAlternateFileName="0MNKLP~1.XLS")) returned 1 [0211.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0MnKlPhrLjEh.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\0mnklphrljeh.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.979] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0211.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0211.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0211.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.980] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0211.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0211.980] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0211.980] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0211.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0211.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1eb8, lpOverlapped=0x0) returned 1 [0211.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe148, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ec0, lpOverlapped=0x0) returned 1 [0211.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0211.984] CloseHandle (hObject=0x1ec) returned 1 [0211.984] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.984] SetEndOfFile (hFile=0x1dc) returned 1 [0211.984] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\0MnKlPhrLjEh.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\0mnklphrljeh.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\0MnKlPhrLjEh.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\0mnklphrljeh.xlsx.vhd")) returned 1 [0211.985] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dbccaa0, ftCreationTime.dwHighDateTime=0x1d5d69c, ftLastAccessTime.dwLowDateTime=0x6bb83b10, ftLastAccessTime.dwHighDateTime=0x1d58d9f, ftLastWriteTime.dwLowDateTime=0x6bb83b10, ftLastWriteTime.dwHighDateTime=0x1d58d9f, nFileSizeHigh=0x0, nFileSizeLow=0x120fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1od5cIpZhr2mrN.xlsx", cAlternateFileName="1OD5CI~1.XLS")) returned 1 [0211.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1od5cIpZhr2mrN.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\1od5cipzhr2mrn.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0211.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0211.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7918 [0211.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7918 | out: hHeap=0x2830000) returned 1 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0211.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0211.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0211.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0211.998] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0211.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0211.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0211.999] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0212.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfc, lpOverlapped=0x0) returned 1 [0212.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff04, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x100, lpOverlapped=0x0) returned 1 [0212.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.005] CloseHandle (hObject=0x1ec) returned 1 [0212.005] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.005] SetEndOfFile (hFile=0x1dc) returned 1 [0212.023] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\1od5cIpZhr2mrN.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\1od5cipzhr2mrn.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\1od5cIpZhr2mrN.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\1od5cipzhr2mrn.xlsx.vhd")) returned 1 [0212.024] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b9c5b0, ftCreationTime.dwHighDateTime=0x1d5ec96, ftLastAccessTime.dwLowDateTime=0xab2b1de0, ftLastAccessTime.dwHighDateTime=0x1d583d5, ftLastWriteTime.dwLowDateTime=0xab2b1de0, ftLastWriteTime.dwHighDateTime=0x1d583d5, nFileSizeHigh=0x0, nFileSizeLow=0x15334, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2fF9yGMaJ.pptx", cAlternateFileName="2FF9YG~1.PPT")) returned 1 [0212.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2fF9yGMaJ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\2ff9ygmaj.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0212.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0212.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0212.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0212.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.035] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0212.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0212.036] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1334, lpOverlapped=0x0) returned 1 [0212.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeccc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1340, lpOverlapped=0x0) returned 1 [0212.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.042] CloseHandle (hObject=0x1ec) returned 1 [0212.042] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.042] SetEndOfFile (hFile=0x1dc) returned 1 [0212.050] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2fF9yGMaJ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\2ff9ygmaj.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2fF9yGMaJ.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\2ff9ygmaj.pptx.vhd")) returned 1 [0212.051] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb89fb060, ftCreationTime.dwHighDateTime=0x1d5dad5, ftLastAccessTime.dwLowDateTime=0xb054bab0, ftLastAccessTime.dwHighDateTime=0x1d5a923, ftLastWriteTime.dwLowDateTime=0xb054bab0, ftLastWriteTime.dwHighDateTime=0x1d5a923, nFileSizeHigh=0x0, nFileSizeLow=0x126d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2HPAyokl5QvA4.xlsx", cAlternateFileName="2HPAYO~1.XLS")) returned 1 [0212.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2HPAyokl5QvA4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\2hpayokl5qva4.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0212.069] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0212.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0212.070] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.070] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.070] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0212.070] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.070] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.070] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.070] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0212.070] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.070] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.070] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.070] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.071] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0212.071] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.072] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.072] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6d5, lpOverlapped=0x0) returned 1 [0212.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff92b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6e0, lpOverlapped=0x0) returned 1 [0212.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.077] CloseHandle (hObject=0x1ec) returned 1 [0212.077] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.077] SetEndOfFile (hFile=0x1dc) returned 1 [0212.092] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2HPAyokl5QvA4.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\2hpayokl5qva4.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2HPAyokl5QvA4.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\2hpayokl5qva4.xlsx.vhd")) returned 1 [0212.093] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f6c1800, ftCreationTime.dwHighDateTime=0x1d5e644, ftLastAccessTime.dwLowDateTime=0x750fb870, ftLastAccessTime.dwHighDateTime=0x1d5e324, ftLastWriteTime.dwLowDateTime=0x750fb870, ftLastWriteTime.dwHighDateTime=0x1d5e324, nFileSizeHigh=0x0, nFileSizeLow=0xef7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4IhnGsiAAU8oIDszlkxj.odt", cAlternateFileName="4IHNGS~1.ODT")) returned 1 [0212.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4IhnGsiAAU8oIDszlkxj.odt" (normalized: "c:\\users\\fd1hvy\\documents\\4ihngsiaau8oidszlkxj.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0212.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0212.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.104] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.105] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.105] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0212.105] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.105] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.105] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.105] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.106] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0212.106] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.106] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.106] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf7a, lpOverlapped=0x0) returned 1 [0212.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff086, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf80, lpOverlapped=0x0) returned 1 [0212.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.110] CloseHandle (hObject=0x1ec) returned 1 [0212.110] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.110] SetEndOfFile (hFile=0x1dc) returned 1 [0212.121] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\4IhnGsiAAU8oIDszlkxj.odt" (normalized: "c:\\users\\fd1hvy\\documents\\4ihngsiaau8oidszlkxj.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\4IhnGsiAAU8oIDszlkxj.odt.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\4ihngsiaau8oidszlkxj.odt.vhd")) returned 1 [0212.122] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a22b30, ftCreationTime.dwHighDateTime=0x1d5eeb7, ftLastAccessTime.dwLowDateTime=0xf9aeaf80, ftLastAccessTime.dwHighDateTime=0x1d5e61e, ftLastWriteTime.dwLowDateTime=0xf9aeaf80, ftLastWriteTime.dwHighDateTime=0x1d5e61e, nFileSizeHigh=0x0, nFileSizeLow=0x96d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5zxppq.pdf", cAlternateFileName="")) returned 1 [0212.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5zxppq.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\5zxppq.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0212.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0212.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0212.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0212.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.133] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0212.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.133] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.134] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0212.134] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.134] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.134] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16d5, lpOverlapped=0x0) returned 1 [0212.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe92b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16e0, lpOverlapped=0x0) returned 1 [0212.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.138] CloseHandle (hObject=0x1ec) returned 1 [0212.138] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.138] SetEndOfFile (hFile=0x1dc) returned 1 [0212.149] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\5zxppq.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\5zxppq.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\5zxppq.pdf.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\5zxppq.pdf.vhd")) returned 1 [0212.150] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5543250, ftCreationTime.dwHighDateTime=0x1d5ebed, ftLastAccessTime.dwLowDateTime=0xf0b3efb0, ftLastAccessTime.dwHighDateTime=0x1d5e6de, ftLastWriteTime.dwLowDateTime=0xf0b3efb0, ftLastWriteTime.dwHighDateTime=0x1d5e6de, nFileSizeHigh=0x0, nFileSizeLow=0x13b99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6N11eQEdJshqcuPo.pdf", cAlternateFileName="6N11EQ~1.PDF")) returned 1 [0212.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\6N11eQEdJshqcuPo.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\6n11eqedjshqcupo.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7bd8 [0212.160] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7bd8 | out: hHeap=0x2830000) returned 1 [0212.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.161] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0212.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0212.162] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1b99, lpOverlapped=0x0) returned 1 [0212.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe467, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ba0, lpOverlapped=0x0) returned 1 [0212.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.166] CloseHandle (hObject=0x1ec) returned 1 [0212.166] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.166] SetEndOfFile (hFile=0x1dc) returned 1 [0212.191] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\6N11eQEdJshqcuPo.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\6n11eqedjshqcupo.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\6N11eQEdJshqcuPo.pdf.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\6n11eqedjshqcupo.pdf.vhd")) returned 1 [0212.192] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6323be90, ftCreationTime.dwHighDateTime=0x1d5ea5e, ftLastAccessTime.dwLowDateTime=0x64f1e7c0, ftLastAccessTime.dwHighDateTime=0x1d5eea4, ftLastWriteTime.dwLowDateTime=0x64f1e7c0, ftLastWriteTime.dwHighDateTime=0x1d5eea4, nFileSizeHigh=0x0, nFileSizeLow=0xc1df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7NB2OreleuIM7xo-yc.ods", cAlternateFileName="7NB2OR~1.ODS")) returned 1 [0212.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\7NB2OreleuIM7xo-yc.ods" (normalized: "c:\\users\\fd1hvy\\documents\\7nb2oreleuim7xo-yc.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0212.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0212.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0212.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0212.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.201] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0212.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0212.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1df, lpOverlapped=0x0) returned 1 [0212.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe21, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e0, lpOverlapped=0x0) returned 1 [0212.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.204] CloseHandle (hObject=0x1ec) returned 1 [0212.204] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.205] SetEndOfFile (hFile=0x1dc) returned 1 [0212.249] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\7NB2OreleuIM7xo-yc.ods" (normalized: "c:\\users\\fd1hvy\\documents\\7nb2oreleuim7xo-yc.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\7NB2OreleuIM7xo-yc.ods.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\7nb2oreleuim7xo-yc.ods.vhd")) returned 1 [0212.250] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d907d20, ftCreationTime.dwHighDateTime=0x1d5ec8c, ftLastAccessTime.dwLowDateTime=0xce594850, ftLastAccessTime.dwHighDateTime=0x1d5e708, ftLastWriteTime.dwLowDateTime=0xce594850, ftLastWriteTime.dwHighDateTime=0x1d5e708, nFileSizeHigh=0x0, nFileSizeLow=0x9559, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AUaJfhsL.ots", cAlternateFileName="")) returned 1 [0212.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\AUaJfhsL.ots" (normalized: "c:\\users\\fd1hvy\\documents\\auajfhsl.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.258] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.259] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0212.259] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.259] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.259] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1559, lpOverlapped=0x0) returned 1 [0212.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeaa7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1560, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1560, lpOverlapped=0x0) returned 1 [0212.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.262] CloseHandle (hObject=0x1ec) returned 1 [0212.262] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.262] SetEndOfFile (hFile=0x1dc) returned 1 [0212.284] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\AUaJfhsL.ots" (normalized: "c:\\users\\fd1hvy\\documents\\auajfhsl.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\AUaJfhsL.ots.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\auajfhsl.ots.vhd")) returned 1 [0212.284] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf49f60c0, ftCreationTime.dwHighDateTime=0x1d597b8, ftLastAccessTime.dwLowDateTime=0x55ebda10, ftLastAccessTime.dwHighDateTime=0x1d572a8, ftLastWriteTime.dwLowDateTime=0x55ebda10, ftLastWriteTime.dwHighDateTime=0x1d572a8, nFileSizeHigh=0x0, nFileSizeLow=0x4193, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bfELMzG3x5TzO06Aun.docx", cAlternateFileName="BFELMZ~1.DOC")) returned 1 [0212.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\bfELMzG3x5TzO06Aun.docx" (normalized: "c:\\users\\fd1hvy\\documents\\bfelmzg3x5tzo06aun.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7708 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7708 | out: hHeap=0x2830000) returned 1 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.296] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0212.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x193, lpOverlapped=0x0) returned 1 [0212.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe6d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a0, lpOverlapped=0x0) returned 1 [0212.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.299] CloseHandle (hObject=0x1ec) returned 1 [0212.299] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.299] SetEndOfFile (hFile=0x1dc) returned 1 [0212.306] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\bfELMzG3x5TzO06Aun.docx" (normalized: "c:\\users\\fd1hvy\\documents\\bfelmzg3x5tzo06aun.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\bfELMzG3x5TzO06Aun.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\bfelmzg3x5tzo06aun.docx.vhd")) returned 1 [0212.306] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b9bbe0, ftCreationTime.dwHighDateTime=0x1d59883, ftLastAccessTime.dwLowDateTime=0x1abde160, ftLastAccessTime.dwHighDateTime=0x1d5a168, ftLastWriteTime.dwLowDateTime=0x1abde160, ftLastWriteTime.dwHighDateTime=0x1d5a168, nFileSizeHigh=0x0, nFileSizeLow=0xdf11, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CzDub2YUZ2E2.docx", cAlternateFileName="CZDUB2~1.DOC")) returned 1 [0212.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\CzDub2YUZ2E2.docx" (normalized: "c:\\users\\fd1hvy\\documents\\czdub2yuz2e2.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7918 [0212.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7918 | out: hHeap=0x2830000) returned 1 [0212.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.315] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.315] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0212.315] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.315] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0212.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1f11, lpOverlapped=0x0) returned 1 [0212.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe0ef, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f20, lpOverlapped=0x0) returned 1 [0212.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.318] CloseHandle (hObject=0x1ec) returned 1 [0212.318] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.319] SetEndOfFile (hFile=0x1dc) returned 1 [0212.330] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\CzDub2YUZ2E2.docx" (normalized: "c:\\users\\fd1hvy\\documents\\czdub2yuz2e2.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\CzDub2YUZ2E2.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\czdub2yuz2e2.docx.vhd")) returned 1 [0212.331] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a89d6b0, ftCreationTime.dwHighDateTime=0x1d5edf4, ftLastAccessTime.dwLowDateTime=0x991adc30, ftLastAccessTime.dwHighDateTime=0x1d5ee01, ftLastWriteTime.dwLowDateTime=0x991adc30, ftLastWriteTime.dwHighDateTime=0x1d5ee01, nFileSizeHigh=0x0, nFileSizeLow=0xef3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d6lw7wexkhC.pdf", cAlternateFileName="D6LW7W~1.PDF")) returned 1 [0212.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\d6lw7wexkhC.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\d6lw7wexkhc.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c10 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c10 | out: hHeap=0x2830000) returned 1 [0212.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf3b, lpOverlapped=0x0) returned 1 [0212.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf40, lpOverlapped=0x0) returned 1 [0212.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.345] CloseHandle (hObject=0x1ec) returned 1 [0212.345] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.345] SetEndOfFile (hFile=0x1dc) returned 1 [0212.347] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\d6lw7wexkhC.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\d6lw7wexkhc.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\d6lw7wexkhC.pdf.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\d6lw7wexkhc.pdf.vhd")) returned 1 [0212.348] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0212.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0212.387] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0212.387] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0212.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0212.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.388] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0212.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.388] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.388] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0212.389] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0212.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0212.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.415] CloseHandle (hObject=0x1ec) returned 1 [0212.415] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.415] SetEndOfFile (hFile=0x1dc) returned 1 [0212.415] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb.vhd")) returned 1 [0212.417] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0212.417] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834d270, ftCreationTime.dwHighDateTime=0x1d58b7d, ftLastAccessTime.dwLowDateTime=0xbeb03a50, ftLastAccessTime.dwHighDateTime=0x1d58f9f, ftLastWriteTime.dwLowDateTime=0xbeb03a50, ftLastWriteTime.dwHighDateTime=0x1d58f9f, nFileSizeHigh=0x0, nFileSizeLow=0xab6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DyuJurY0EnD08c.pptx", cAlternateFileName="DYUJUR~1.PPT")) returned 1 [0212.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\DyuJurY0EnD08c.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\dyujury0end08c.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0212.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0212.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.427] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0212.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb6c, lpOverlapped=0x0) returned 1 [0212.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff494, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb70, lpOverlapped=0x0) returned 1 [0212.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.433] CloseHandle (hObject=0x1ec) returned 1 [0212.433] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.433] SetEndOfFile (hFile=0x1dc) returned 1 [0212.442] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\DyuJurY0EnD08c.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\dyujury0end08c.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\DyuJurY0EnD08c.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\dyujury0end08c.pptx.vhd")) returned 1 [0212.443] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d4fefd0, ftCreationTime.dwHighDateTime=0x1d5e0e1, ftLastAccessTime.dwLowDateTime=0x354dd7d0, ftLastAccessTime.dwHighDateTime=0x1d59284, ftLastWriteTime.dwLowDateTime=0x354dd7d0, ftLastWriteTime.dwHighDateTime=0x1d59284, nFileSizeHigh=0x0, nFileSizeLow=0x3f67, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dZFFabVN55LW.pptx", cAlternateFileName="DZFFAB~1.PPT")) returned 1 [0212.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dZFFabVN55LW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\dzffabvn55lw.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0212.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0212.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.455] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0212.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0212.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1f67, lpOverlapped=0x0) returned 1 [0212.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe099, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f70, lpOverlapped=0x0) returned 1 [0212.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.458] CloseHandle (hObject=0x1ec) returned 1 [0212.458] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.458] SetEndOfFile (hFile=0x1dc) returned 1 [0212.469] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\dZFFabVN55LW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\dzffabvn55lw.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\dZFFabVN55LW.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\dzffabvn55lw.pptx.vhd")) returned 1 [0212.470] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d3320, ftCreationTime.dwHighDateTime=0x1d5eae9, ftLastAccessTime.dwLowDateTime=0x5c1305e0, ftLastAccessTime.dwHighDateTime=0x1d5d661, ftLastWriteTime.dwLowDateTime=0x5c1305e0, ftLastWriteTime.dwHighDateTime=0x1d5d661, nFileSizeHigh=0x0, nFileSizeLow=0x4a5e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e6jvjxrHDOeQm.docx", cAlternateFileName="E6JVJX~1.DOC")) returned 1 [0212.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\e6jvjxrHDOeQm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\e6jvjxrhdoeqm.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0212.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.480] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0212.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.482] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0212.482] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.482] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.482] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa5e, lpOverlapped=0x0) returned 1 [0212.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa60, lpOverlapped=0x0) returned 1 [0212.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.484] CloseHandle (hObject=0x1ec) returned 1 [0212.484] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.484] SetEndOfFile (hFile=0x1dc) returned 1 [0212.487] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\e6jvjxrHDOeQm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\e6jvjxrhdoeqm.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\e6jvjxrHDOeQm.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\e6jvjxrhdoeqm.docx.vhd")) returned 1 [0212.488] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96b820, ftCreationTime.dwHighDateTime=0x1d57eab, ftLastAccessTime.dwLowDateTime=0x8ba46980, ftLastAccessTime.dwHighDateTime=0x1d57f8a, ftLastWriteTime.dwLowDateTime=0x8ba46980, ftLastWriteTime.dwHighDateTime=0x1d57f8a, nFileSizeHigh=0x0, nFileSizeLow=0x151e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EbpIpN5muNf.pptx", cAlternateFileName="EBPIPN~1.PPT")) returned 1 [0212.488] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\EbpIpN5muNf.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ebpipn5munf.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0212.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0212.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.498] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.498] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.499] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.499] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0212.499] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.499] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.499] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.499] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.500] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0212.500] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.500] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.500] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x11e6, lpOverlapped=0x0) returned 1 [0212.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x11f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x11f0, lpOverlapped=0x0) returned 1 [0212.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.505] CloseHandle (hObject=0x1ec) returned 1 [0212.506] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.506] SetEndOfFile (hFile=0x1dc) returned 1 [0212.557] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\EbpIpN5muNf.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ebpipn5munf.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\EbpIpN5muNf.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\ebpipn5munf.pptx.vhd")) returned 1 [0212.558] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ac229e0, ftCreationTime.dwHighDateTime=0x1d5e94f, ftLastAccessTime.dwLowDateTime=0x994dc270, ftLastAccessTime.dwHighDateTime=0x1d5ef06, ftLastWriteTime.dwLowDateTime=0x994dc270, ftLastWriteTime.dwHighDateTime=0x1d5ef06, nFileSizeHigh=0x0, nFileSizeLow=0x7704, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FMIZu-gQzk- WMCDhLu.xlsx", cAlternateFileName="FMIZU-~1.XLS")) returned 1 [0212.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\FMIZu-gQzk- WMCDhLu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\fmizu-gqzk- wmcdhlu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.568] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6338 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6338 | out: hHeap=0x2830000) returned 1 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.569] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0212.571] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1704, lpOverlapped=0x0) returned 1 [0212.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1710, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1710, lpOverlapped=0x0) returned 1 [0212.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.581] CloseHandle (hObject=0x1ec) returned 1 [0212.582] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.582] SetEndOfFile (hFile=0x1dc) returned 1 [0212.588] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\FMIZu-gQzk- WMCDhLu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\fmizu-gqzk- wmcdhlu.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\FMIZu-gQzk- WMCDhLu.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\fmizu-gqzk- wmcdhlu.xlsx.vhd")) returned 1 [0212.589] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd48b03e0, ftCreationTime.dwHighDateTime=0x1d5e847, ftLastAccessTime.dwLowDateTime=0x49691070, ftLastAccessTime.dwHighDateTime=0x1d5f0a5, ftLastWriteTime.dwLowDateTime=0x49691070, ftLastWriteTime.dwHighDateTime=0x1d5f0a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jCk_SKIKq5", cAlternateFileName="JCK_SK~1")) returned 1 [0212.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6338 [0212.589] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4a) returned 0xde7ad0 [0212.589] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0212.589] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0212.589] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0212.589] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0212.589] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0212.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6468 [0212.590] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7bd8 [0212.590] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a562b00, ftCreationTime.dwHighDateTime=0x1d5f062, ftLastAccessTime.dwLowDateTime=0x1e7cb3f0, ftLastAccessTime.dwHighDateTime=0x1d5ed60, ftLastWriteTime.dwLowDateTime=0x1e7cb3f0, ftLastWriteTime.dwHighDateTime=0x1d5ed60, nFileSizeHigh=0x0, nFileSizeLow=0x3de2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qEclatzJde7cB.rtf", cAlternateFileName="QECLAT~1.RTF")) returned 1 [0212.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\qEclatzJde7cB.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\qeclatzjde7cb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0212.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0212.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.599] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.599] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.600] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.600] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0212.600] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.600] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.600] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.600] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0212.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1de2, lpOverlapped=0x0) returned 1 [0212.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe21e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1df0, lpOverlapped=0x0) returned 1 [0212.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.603] CloseHandle (hObject=0x1ec) returned 1 [0212.607] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.607] SetEndOfFile (hFile=0x1dc) returned 1 [0212.614] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\qEclatzJde7cB.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\qeclatzjde7cb.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\qEclatzJde7cB.rtf.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\qeclatzjde7cb.rtf.vhd")) returned 1 [0212.615] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4ca2530, ftCreationTime.dwHighDateTime=0x1d5d24d, ftLastAccessTime.dwLowDateTime=0x346dc5b0, ftLastAccessTime.dwHighDateTime=0x1d5b2bd, ftLastWriteTime.dwLowDateTime=0x346dc5b0, ftLastWriteTime.dwHighDateTime=0x1d5b2bd, nFileSizeHigh=0x0, nFileSizeLow=0x2ce8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RJmWMfochh Qsz1lz.xlsx", cAlternateFileName="RJMWMF~1.XLS")) returned 1 [0212.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\RJmWMfochh Qsz1lz.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\rjmwmfochh qsz1lz.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0212.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0212.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0212.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0212.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.626] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0212.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0212.627] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xce8, lpOverlapped=0x0) returned 1 [0212.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff318, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcf0, lpOverlapped=0x0) returned 1 [0212.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.628] CloseHandle (hObject=0x1ec) returned 1 [0212.628] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.628] SetEndOfFile (hFile=0x1dc) returned 1 [0212.642] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\RJmWMfochh Qsz1lz.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\rjmwmfochh qsz1lz.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\RJmWMfochh Qsz1lz.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\rjmwmfochh qsz1lz.xlsx.vhd")) returned 1 [0212.643] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62aa50, ftCreationTime.dwHighDateTime=0x1d5cc1e, ftLastAccessTime.dwLowDateTime=0x377a59d0, ftLastAccessTime.dwHighDateTime=0x1d5e6fc, ftLastWriteTime.dwLowDateTime=0x377a59d0, ftLastWriteTime.dwHighDateTime=0x1d5e6fc, nFileSizeHigh=0x0, nFileSizeLow=0x11849, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="roZi1M8rFR_a0.xlsx", cAlternateFileName="ROZI1M~1.XLS")) returned 1 [0212.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\roZi1M8rFR_a0.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\rozi1m8rfr_a0.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0212.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0212.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.653] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.653] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.653] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.655] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0212.655] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.655] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.655] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1849, lpOverlapped=0x0) returned 1 [0212.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe7b7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1850, lpOverlapped=0x0) returned 1 [0212.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.659] CloseHandle (hObject=0x1ec) returned 1 [0212.659] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.659] SetEndOfFile (hFile=0x1dc) returned 1 [0212.694] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\roZi1M8rFR_a0.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\rozi1m8rfr_a0.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\roZi1M8rFR_a0.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\rozi1m8rfr_a0.xlsx.vhd")) returned 1 [0212.695] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9734910, ftCreationTime.dwHighDateTime=0x1d5b269, ftLastAccessTime.dwLowDateTime=0x93b78620, ftLastAccessTime.dwHighDateTime=0x1d5c49f, ftLastWriteTime.dwLowDateTime=0x93b78620, ftLastWriteTime.dwHighDateTime=0x1d5c49f, nFileSizeHigh=0x0, nFileSizeLow=0x241a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="T9SyOdit6vq tMVdreH.pptx", cAlternateFileName="T9SYOD~1.PPT")) returned 1 [0212.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T9SyOdit6vq tMVdreH.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t9syodit6vq tmvdreh.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0212.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0212.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.709] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0212.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x41a, lpOverlapped=0x0) returned 1 [0212.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbe6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x420, lpOverlapped=0x0) returned 1 [0212.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.712] CloseHandle (hObject=0x1ec) returned 1 [0212.712] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.712] SetEndOfFile (hFile=0x1dc) returned 1 [0212.739] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\T9SyOdit6vq tMVdreH.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t9syodit6vq tmvdreh.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\T9SyOdit6vq tMVdreH.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\t9syodit6vq tmvdreh.pptx.vhd")) returned 1 [0212.740] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ff4a90, ftCreationTime.dwHighDateTime=0x1d5e309, ftLastAccessTime.dwLowDateTime=0x8f900fa0, ftLastAccessTime.dwHighDateTime=0x1d5e474, ftLastWriteTime.dwLowDateTime=0x8f900fa0, ftLastWriteTime.dwHighDateTime=0x1d5e474, nFileSizeHigh=0x0, nFileSizeLow=0x53b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="te4m.docx", cAlternateFileName="TE4M~1.DOC")) returned 1 [0212.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\te4m.docx" (normalized: "c:\\users\\fd1hvy\\documents\\te4m.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0212.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0212.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.752] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0212.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.752] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0212.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.753] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0212.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0212.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x13b4, lpOverlapped=0x0) returned 1 [0212.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec4c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x13c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x13c0, lpOverlapped=0x0) returned 1 [0212.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.756] CloseHandle (hObject=0x1ec) returned 1 [0212.756] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.756] SetEndOfFile (hFile=0x1dc) returned 1 [0212.777] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\te4m.docx" (normalized: "c:\\users\\fd1hvy\\documents\\te4m.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\te4m.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\te4m.docx.vhd")) returned 1 [0212.778] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e76db0, ftCreationTime.dwHighDateTime=0x1d59856, ftLastAccessTime.dwLowDateTime=0xd1b34760, ftLastAccessTime.dwHighDateTime=0x1d5a74f, ftLastWriteTime.dwLowDateTime=0xd1b34760, ftLastWriteTime.dwHighDateTime=0x1d5a74f, nFileSizeHigh=0x0, nFileSizeLow=0x8a2b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UQXUArWS.docx", cAlternateFileName="UQXUAR~1.DOC")) returned 1 [0212.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\UQXUArWS.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uqxuarws.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0212.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0212.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.789] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.789] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.789] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0212.789] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.789] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0212.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa2b, lpOverlapped=0x0) returned 1 [0212.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa30, lpOverlapped=0x0) returned 1 [0212.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.795] CloseHandle (hObject=0x1ec) returned 1 [0212.796] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.796] SetEndOfFile (hFile=0x1dc) returned 1 [0212.805] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\UQXUArWS.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uqxuarws.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\UQXUArWS.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\uqxuarws.docx.vhd")) returned 1 [0212.806] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b26ae0, ftCreationTime.dwHighDateTime=0x1d5db5b, ftLastAccessTime.dwLowDateTime=0xc1950760, ftLastAccessTime.dwHighDateTime=0x1d56fb9, ftLastWriteTime.dwLowDateTime=0xc1950760, ftLastWriteTime.dwHighDateTime=0x1d56fb9, nFileSizeHigh=0x0, nFileSizeLow=0x7442, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yZ39qj.docx", cAlternateFileName="YZ39QJ~1.DOC")) returned 1 [0212.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\yZ39qj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\yz39qj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0212.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0212.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6488 [0212.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6488 | out: hHeap=0x2830000) returned 1 [0212.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.816] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.817] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0212.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.817] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.817] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0212.818] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.818] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1442, lpOverlapped=0x0) returned 1 [0212.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebbe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1450, lpOverlapped=0x0) returned 1 [0212.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.820] CloseHandle (hObject=0x1ec) returned 1 [0212.820] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.820] SetEndOfFile (hFile=0x1dc) returned 1 [0212.830] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\yZ39qj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\yz39qj.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\yZ39qj.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\yz39qj.docx.vhd")) returned 1 [0212.831] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b26ae0, ftCreationTime.dwHighDateTime=0x1d5db5b, ftLastAccessTime.dwLowDateTime=0xc1950760, ftLastAccessTime.dwHighDateTime=0x1d56fb9, ftLastWriteTime.dwLowDateTime=0xc1950760, ftLastWriteTime.dwHighDateTime=0x1d56fb9, nFileSizeHigh=0x0, nFileSizeLow=0x7442, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yZ39qj.docx", cAlternateFileName="YZ39QJ~1.DOC")) returned 0 [0212.831] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0212.831] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9ffd1af7, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0x9ffd1af7, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0212.831] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9ffd1af7, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0x9ffd1af7, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.831] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcebc960, ftCreationTime.dwHighDateTime=0x1d5e322, ftLastAccessTime.dwLowDateTime=0x98f98200, ftLastAccessTime.dwHighDateTime=0x1d5ec13, ftLastWriteTime.dwLowDateTime=0x98f98200, ftLastWriteTime.dwHighDateTime=0x1d5ec13, nFileSizeHigh=0x0, nFileSizeLow=0x100ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5UoLwfwu.wav", cAlternateFileName="")) returned 1 [0212.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5UoLwfwu.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\5uolwfwu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0212.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0212.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.844] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.844] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.844] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0212.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xab, lpOverlapped=0x0) returned 1 [0212.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff55, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb0, lpOverlapped=0x0) returned 1 [0212.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.850] CloseHandle (hObject=0x1ec) returned 1 [0212.852] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.852] SetEndOfFile (hFile=0x1dc) returned 1 [0212.868] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\5UoLwfwu.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\5uolwfwu.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\5UoLwfwu.wav.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\5uolwfwu.wav.vhd")) returned 1 [0212.891] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a634a0, ftCreationTime.dwHighDateTime=0x1d5ef92, ftLastAccessTime.dwLowDateTime=0x9d010a80, ftLastAccessTime.dwHighDateTime=0x1d5e6c3, ftLastWriteTime.dwLowDateTime=0x9d010a80, ftLastWriteTime.dwHighDateTime=0x1d5e6c3, nFileSizeHigh=0x0, nFileSizeLow=0x72c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6Q2Db.m4a", cAlternateFileName="")) returned 1 [0212.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Q2Db.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6q2db.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0212.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0212.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0212.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0212.902] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.902] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.902] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0212.902] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.902] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.903] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0212.903] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.903] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.903] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c5, lpOverlapped=0x0) returned 1 [0212.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed3b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12d0, lpOverlapped=0x0) returned 1 [0212.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.906] CloseHandle (hObject=0x1ec) returned 1 [0212.913] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.913] SetEndOfFile (hFile=0x1dc) returned 1 [0212.923] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\6Q2Db.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6q2db.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\6Q2Db.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\6q2db.m4a.vhd")) returned 1 [0212.944] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58f2f850, ftCreationTime.dwHighDateTime=0x1d5e8c4, ftLastAccessTime.dwLowDateTime=0x862923a0, ftLastAccessTime.dwHighDateTime=0x1d5efc0, ftLastWriteTime.dwLowDateTime=0x862923a0, ftLastWriteTime.dwHighDateTime=0x1d5efc0, nFileSizeHigh=0x0, nFileSizeLow=0x18d23, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aDRI.bmp", cAlternateFileName="")) returned 1 [0212.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\aDRI.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\adri.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0212.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0212.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0212.954] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0212.954] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0212.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0212.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0212.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.955] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0212.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0212.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0212.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0212.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0212.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0212.956] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0212.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0212.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0212.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0212.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0212.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd23, lpOverlapped=0x0) returned 1 [0212.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2dd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd30, lpOverlapped=0x0) returned 1 [0212.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0212.962] CloseHandle (hObject=0x1ec) returned 1 [0212.974] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.974] SetEndOfFile (hFile=0x1dc) returned 1 [0212.981] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\aDRI.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\adri.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\aDRI.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\adri.bmp.vhd")) returned 1 [0212.991] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89f720, ftCreationTime.dwHighDateTime=0x1d5eda6, ftLastAccessTime.dwLowDateTime=0xb3d60410, ftLastAccessTime.dwHighDateTime=0x1d5ebd0, ftLastWriteTime.dwLowDateTime=0xb3d60410, ftLastWriteTime.dwHighDateTime=0x1d5ebd0, nFileSizeHigh=0x0, nFileSizeLow=0xc7e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bw-lBt4Oep_on.csv", cAlternateFileName="BW-LBT~1.CSV")) returned 1 [0212.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Bw-lBt4Oep_on.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\bw-lbt4oep_on.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0212.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0212.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0213.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0213.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0213.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0213.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.002] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0213.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0213.003] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x7e2, lpOverlapped=0x0) returned 1 [0213.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff81e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x7f0, lpOverlapped=0x0) returned 1 [0213.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.007] CloseHandle (hObject=0x1ec) returned 1 [0213.012] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.012] SetEndOfFile (hFile=0x1dc) returned 1 [0213.025] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Bw-lBt4Oep_on.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\bw-lbt4oep_on.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Bw-lBt4Oep_on.csv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\bw-lbt4oep_on.csv.vhd")) returned 1 [0213.028] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c55c830, ftCreationTime.dwHighDateTime=0x1d5eae2, ftLastAccessTime.dwLowDateTime=0x5a0ec3b0, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0x5a0ec3b0, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x108bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cIMXkMYiW5Rxp-.gif", cAlternateFileName="CIMXKM~1.GIF")) returned 1 [0213.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\cIMXkMYiW5Rxp-.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\cimxkmyiw5rxp-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0213.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0213.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0213.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0213.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.039] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0213.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0213.040] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.040] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8bf, lpOverlapped=0x0) returned 1 [0213.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff741, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0213.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.045] CloseHandle (hObject=0x1ec) returned 1 [0213.054] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.054] SetEndOfFile (hFile=0x1dc) returned 1 [0213.061] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\cIMXkMYiW5Rxp-.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\cimxkmyiw5rxp-.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\cIMXkMYiW5Rxp-.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\cimxkmyiw5rxp-.gif.vhd")) returned 1 [0213.074] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e71fb0, ftCreationTime.dwHighDateTime=0x1d5e99f, ftLastAccessTime.dwLowDateTime=0x252fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5eea3, ftLastWriteTime.dwLowDateTime=0x252fb0a0, ftLastWriteTime.dwHighDateTime=0x1d5eea3, nFileSizeHigh=0x0, nFileSizeLow=0xa131, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="csSCjX.odt", cAlternateFileName="")) returned 1 [0213.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\csSCjX.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\csscjx.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0213.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0213.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.084] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x131, lpOverlapped=0x0) returned 1 [0213.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffecf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x140, lpOverlapped=0x0) returned 1 [0213.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.091] CloseHandle (hObject=0x1ec) returned 1 [0213.092] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.092] SetEndOfFile (hFile=0x1dc) returned 1 [0213.101] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\csSCjX.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\csscjx.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\csSCjX.odt.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\csscjx.odt.vhd")) returned 1 [0213.107] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825741c0, ftCreationTime.dwHighDateTime=0x1d5e1e3, ftLastAccessTime.dwLowDateTime=0x46f1d480, ftLastAccessTime.dwHighDateTime=0x1d5e655, ftLastWriteTime.dwLowDateTime=0x46f1d480, ftLastWriteTime.dwHighDateTime=0x1d5e655, nFileSizeHigh=0x0, nFileSizeLow=0xfd35, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CX7c1KB.csv", cAlternateFileName="")) returned 1 [0213.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CX7c1KB.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\cx7c1kb.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0213.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0213.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0213.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0213.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.118] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.118] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.118] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1d35, lpOverlapped=0x0) returned 1 [0213.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe2cb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d40, lpOverlapped=0x0) returned 1 [0213.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.124] CloseHandle (hObject=0x1ec) returned 1 [0213.131] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.131] SetEndOfFile (hFile=0x1dc) returned 1 [0213.134] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\CX7c1KB.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\cx7c1kb.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\CX7c1KB.csv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\cx7c1kb.csv.vhd")) returned 1 [0213.139] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991f2ca9, ftCreationTime.dwHighDateTime=0x1d5ffe4, ftLastAccessTime.dwLowDateTime=0x991f2ca9, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xe8e05d33, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Czuw.pIs", cAlternateFileName="")) returned 1 [0213.139] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa91d9360, ftCreationTime.dwHighDateTime=0x1d5e8da, ftLastAccessTime.dwLowDateTime=0x928588d0, ftLastAccessTime.dwHighDateTime=0x1d5e4eb, ftLastWriteTime.dwLowDateTime=0x928588d0, ftLastWriteTime.dwHighDateTime=0x1d5e4eb, nFileSizeHigh=0x0, nFileSizeLow=0x3151, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DapNonHoMevAgR.png", cAlternateFileName="DAPNON~1.PNG")) returned 1 [0213.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DapNonHoMevAgR.png" (normalized: "c:\\users\\fd1hvy\\desktop\\dapnonhomevagr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0213.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0213.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6368 [0213.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6368 | out: hHeap=0x2830000) returned 1 [0213.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.150] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1151, lpOverlapped=0x0) returned 1 [0213.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeeaf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1160, lpOverlapped=0x0) returned 1 [0213.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.155] CloseHandle (hObject=0x1ec) returned 1 [0213.157] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.157] SetEndOfFile (hFile=0x1dc) returned 1 [0213.227] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\DapNonHoMevAgR.png" (normalized: "c:\\users\\fd1hvy\\desktop\\dapnonhomevagr.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\DapNonHoMevAgR.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\dapnonhomevagr.png.vhd")) returned 1 [0213.228] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.228] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ae44d0, ftCreationTime.dwHighDateTime=0x1d5ee0f, ftLastAccessTime.dwLowDateTime=0x471585d0, ftLastAccessTime.dwHighDateTime=0x1d5e2f7, ftLastWriteTime.dwLowDateTime=0x471585d0, ftLastWriteTime.dwHighDateTime=0x1d5e2f7, nFileSizeHigh=0x0, nFileSizeLow=0x10a51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DVWM_X70Fojq85di9Ryu.mp3", cAlternateFileName="DVWM_X~1.MP3")) returned 1 [0213.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DVWM_X70Fojq85di9Ryu.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\dvwm_x70fojq85di9ryu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0213.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0213.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6448 [0213.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6448 | out: hHeap=0x2830000) returned 1 [0213.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.239] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0213.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0213.240] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa51, lpOverlapped=0x0) returned 1 [0213.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5af, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa60, lpOverlapped=0x0) returned 1 [0213.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.245] CloseHandle (hObject=0x1ec) returned 1 [0213.246] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.246] SetEndOfFile (hFile=0x1dc) returned 1 [0213.246] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\DVWM_X70Fojq85di9Ryu.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\dvwm_x70fojq85di9ryu.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\DVWM_X70Fojq85di9Ryu.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\dvwm_x70fojq85di9ryu.mp3.vhd")) returned 1 [0213.247] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc164df0, ftCreationTime.dwHighDateTime=0x1d5e602, ftLastAccessTime.dwLowDateTime=0x4d0bba70, ftLastAccessTime.dwHighDateTime=0x1d5f028, ftLastWriteTime.dwLowDateTime=0x4d0bba70, ftLastWriteTime.dwHighDateTime=0x1d5f028, nFileSizeHigh=0x0, nFileSizeLow=0x13775, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e_X9C_0.gif", cAlternateFileName="")) returned 1 [0213.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\e_X9C_0.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\e_x9c_0.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0213.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0213.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.257] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0213.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.259] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0213.259] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.259] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.259] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1775, lpOverlapped=0x0) returned 1 [0213.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe88b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1780, lpOverlapped=0x0) returned 1 [0213.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.269] CloseHandle (hObject=0x1ec) returned 1 [0213.269] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.270] SetEndOfFile (hFile=0x1dc) returned 1 [0213.270] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\e_X9C_0.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\e_x9c_0.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\e_X9C_0.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\e_x9c_0.gif.vhd")) returned 1 [0213.271] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ddfd630, ftCreationTime.dwHighDateTime=0x1d5ea63, ftLastAccessTime.dwLowDateTime=0x32071430, ftLastAccessTime.dwHighDateTime=0x1d5e629, ftLastWriteTime.dwLowDateTime=0x32071430, ftLastWriteTime.dwHighDateTime=0x1d5e629, nFileSizeHigh=0x0, nFileSizeLow=0x11a76, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F2- BRs adGnJ366Msl.avi", cAlternateFileName="F2-BRS~1.AVI")) returned 1 [0213.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2- BRs adGnJ366Msl.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\f2- brs adgnj366msl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0213.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6498 [0213.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6498 | out: hHeap=0x2830000) returned 1 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.281] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a76, lpOverlapped=0x0) returned 1 [0213.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe58a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a80, lpOverlapped=0x0) returned 1 [0213.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.288] CloseHandle (hObject=0x1ec) returned 1 [0213.288] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.288] SetEndOfFile (hFile=0x1dc) returned 1 [0213.288] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\F2- BRs adGnJ366Msl.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\f2- brs adgnj366msl.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\F2- BRs adGnJ366Msl.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\f2- brs adgnj366msl.avi.vhd")) returned 1 [0213.289] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb168ed40, ftCreationTime.dwHighDateTime=0x1d5e591, ftLastAccessTime.dwLowDateTime=0xc6994460, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xc6994460, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0xdec9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G3FCi7ucvc-1g.mp3", cAlternateFileName="G3FCI7~1.MP3")) returned 1 [0213.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\G3FCi7ucvc-1g.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\g3fci7ucvc-1g.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0213.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.300] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.301] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0213.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec9, lpOverlapped=0x0) returned 1 [0213.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe137, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ed0, lpOverlapped=0x0) returned 1 [0213.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.306] CloseHandle (hObject=0x1ec) returned 1 [0213.306] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.306] SetEndOfFile (hFile=0x1dc) returned 1 [0213.306] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\G3FCi7ucvc-1g.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\g3fci7ucvc-1g.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\G3FCi7ucvc-1g.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\g3fci7ucvc-1g.mp3.vhd")) returned 1 [0213.308] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ffd1af7, ftCreationTime.dwHighDateTime=0x1d5ffe4, ftLastAccessTime.dwLowDateTime=0x9ffd1af7, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa00b6478, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HowToDecrypt.txt", cAlternateFileName="HOWTOD~1.TXT")) returned 1 [0213.308] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcecec190, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xc26e5a0, ftLastAccessTime.dwHighDateTime=0x1d5eadf, ftLastWriteTime.dwLowDateTime=0xc26e5a0, ftLastWriteTime.dwHighDateTime=0x1d5eadf, nFileSizeHigh=0x0, nFileSizeLow=0xd8c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I_wXEg.gif", cAlternateFileName="")) returned 1 [0213.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\I_wXEg.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\i_wxeg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0213.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0213.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.319] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.319] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0213.319] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.319] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.319] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.319] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.320] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0213.320] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.320] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.320] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18c0, lpOverlapped=0x0) returned 1 [0213.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18c0, lpOverlapped=0x0) returned 1 [0213.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.324] CloseHandle (hObject=0x1ec) returned 1 [0213.324] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.324] SetEndOfFile (hFile=0x1dc) returned 1 [0213.324] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\I_wXEg.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\i_wxeg.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\I_wXEg.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\i_wxeg.gif.vhd")) returned 1 [0213.325] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821fd160, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0xc25689c0, ftLastAccessTime.dwHighDateTime=0x1d5ef49, ftLastWriteTime.dwLowDateTime=0xc25689c0, ftLastWriteTime.dwHighDateTime=0x1d5ef49, nFileSizeHigh=0x0, nFileSizeLow=0x2c3d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LdrAX12W.mkv", cAlternateFileName="")) returned 1 [0213.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LdrAX12W.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ldrax12w.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0213.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0213.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.353] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0213.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.353] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.353] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.354] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.355] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0213.355] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.355] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.355] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc3d, lpOverlapped=0x0) returned 1 [0213.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff3c3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc40, lpOverlapped=0x0) returned 1 [0213.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.357] CloseHandle (hObject=0x1ec) returned 1 [0213.357] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.357] SetEndOfFile (hFile=0x1dc) returned 1 [0213.358] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\LdrAX12W.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ldrax12w.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\LdrAX12W.mkv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\ldrax12w.mkv.vhd")) returned 1 [0213.360] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8233a6d0, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0xc49e80b0, ftLastAccessTime.dwHighDateTime=0x1d5e603, ftLastWriteTime.dwLowDateTime=0xc49e80b0, ftLastWriteTime.dwHighDateTime=0x1d5e603, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="l_BY07bihxWuWw", cAlternateFileName="L_BY07~1")) returned 1 [0213.360] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6368 [0213.360] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0xde7708 [0213.360] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7294fd0, ftCreationTime.dwHighDateTime=0x1d5e8fa, ftLastAccessTime.dwLowDateTime=0xd9853240, ftLastAccessTime.dwHighDateTime=0x1d5e3d2, ftLastWriteTime.dwLowDateTime=0xd9853240, ftLastWriteTime.dwHighDateTime=0x1d5e3d2, nFileSizeHigh=0x0, nFileSizeLow=0xcc73, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nj0Y.jpg", cAlternateFileName="")) returned 1 [0213.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nj0Y.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\nj0y.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0213.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0213.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.379] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.380] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.380] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.380] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.380] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.380] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.381] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc73, lpOverlapped=0x0) returned 1 [0213.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff38d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc80, lpOverlapped=0x0) returned 1 [0213.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.385] CloseHandle (hObject=0x1ec) returned 1 [0213.385] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.385] SetEndOfFile (hFile=0x1dc) returned 1 [0213.386] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\nj0Y.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\nj0y.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\nj0Y.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\nj0y.jpg.vhd")) returned 1 [0213.386] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d2efb30, ftCreationTime.dwHighDateTime=0x1d5ec22, ftLastAccessTime.dwLowDateTime=0xc1b70280, ftLastAccessTime.dwHighDateTime=0x1d5ece5, ftLastWriteTime.dwLowDateTime=0xc1b70280, ftLastWriteTime.dwHighDateTime=0x1d5ece5, nFileSizeHigh=0x0, nFileSizeLow=0x16758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PdBNEB_0rrqK2-Wngrs4.bmp", cAlternateFileName="PDBNEB~1.BMP")) returned 1 [0213.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PdBNEB_0rrqK2-Wngrs4.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\pdbneb_0rrqk2-wngrs4.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0213.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0213.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.397] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.397] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0213.397] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.397] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.397] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.397] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.398] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0213.398] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.398] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.398] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x758, lpOverlapped=0x0) returned 1 [0213.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x760, lpOverlapped=0x0) returned 1 [0213.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.405] CloseHandle (hObject=0x1ec) returned 1 [0213.405] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.405] SetEndOfFile (hFile=0x1dc) returned 1 [0213.405] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\PdBNEB_0rrqK2-Wngrs4.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\pdbneb_0rrqk2-wngrs4.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\PdBNEB_0rrqK2-Wngrs4.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\pdbneb_0rrqk2-wngrs4.bmp.vhd")) returned 1 [0213.406] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4917d170, ftCreationTime.dwHighDateTime=0x1d5ebea, ftLastAccessTime.dwLowDateTime=0xab7409e0, ftLastAccessTime.dwHighDateTime=0x1d5eb74, ftLastWriteTime.dwLowDateTime=0xab7409e0, ftLastWriteTime.dwHighDateTime=0x1d5eb74, nFileSizeHigh=0x0, nFileSizeLow=0x8345, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PXb9ed-y0T0.mp3", cAlternateFileName="PXB9ED~1.MP3")) returned 1 [0213.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PXb9ed-y0T0.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\pxb9ed-y0t0.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.418] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.418] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.418] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0213.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.419] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0213.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0213.421] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.421] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x345, lpOverlapped=0x0) returned 1 [0213.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffcbb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x350, lpOverlapped=0x0) returned 1 [0213.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.423] CloseHandle (hObject=0x1ec) returned 1 [0213.424] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.424] SetEndOfFile (hFile=0x1dc) returned 1 [0213.424] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\PXb9ed-y0T0.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\pxb9ed-y0t0.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\PXb9ed-y0T0.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\pxb9ed-y0t0.mp3.vhd")) returned 1 [0213.425] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f5c62e0, ftCreationTime.dwHighDateTime=0x1d5efa0, ftLastAccessTime.dwLowDateTime=0x17588a10, ftLastAccessTime.dwHighDateTime=0x1d5ebc9, ftLastWriteTime.dwLowDateTime=0x17588a10, ftLastWriteTime.dwHighDateTime=0x1d5ebc9, nFileSizeHigh=0x0, nFileSizeLow=0xee2d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qdy20NlCM3.avi", cAlternateFileName="QDY20N~1.AVI")) returned 1 [0213.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Qdy20NlCM3.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\qdy20nlcm3.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0213.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.435] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0213.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0213.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe2d, lpOverlapped=0x0) returned 1 [0213.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1d3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe30, lpOverlapped=0x0) returned 1 [0213.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.441] CloseHandle (hObject=0x1ec) returned 1 [0213.441] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.441] SetEndOfFile (hFile=0x1dc) returned 1 [0213.441] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Qdy20NlCM3.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\qdy20nlcm3.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Qdy20NlCM3.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\qdy20nlcm3.avi.vhd")) returned 1 [0213.442] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf7c40, ftCreationTime.dwHighDateTime=0x1d5e7bd, ftLastAccessTime.dwLowDateTime=0xb1bea70, ftLastAccessTime.dwHighDateTime=0x1d5e80f, ftLastWriteTime.dwLowDateTime=0xb1bea70, ftLastWriteTime.dwHighDateTime=0x1d5e80f, nFileSizeHigh=0x0, nFileSizeLow=0xded3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="riTeT.bmp", cAlternateFileName="")) returned 1 [0213.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\riTeT.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\ritet.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0213.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.453] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ed3, lpOverlapped=0x0) returned 1 [0213.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe12d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ee0, lpOverlapped=0x0) returned 1 [0213.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.459] CloseHandle (hObject=0x1ec) returned 1 [0213.459] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.459] SetEndOfFile (hFile=0x1dc) returned 1 [0213.459] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\riTeT.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\ritet.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\riTeT.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\ritet.bmp.vhd")) returned 1 [0213.460] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b2880, ftCreationTime.dwHighDateTime=0x1d5ffe4, ftLastAccessTime.dwLowDateTime=0x676b2880, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0x173e9700, ftLastWriteTime.dwHighDateTime=0x1d5ffe1, nFileSizeHigh=0x0, nFileSizeLow=0x1be00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="splwow32.exe", cAlternateFileName="")) returned 1 [0213.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\splwow32.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\splwow32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0213.461] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeacff0, ftCreationTime.dwHighDateTime=0x1d5e80b, ftLastAccessTime.dwLowDateTime=0x3cbae590, ftLastAccessTime.dwHighDateTime=0x1d5e2bf, ftLastWriteTime.dwLowDateTime=0x3cbae590, ftLastWriteTime.dwHighDateTime=0x1d5e2bf, nFileSizeHigh=0x0, nFileSizeLow=0x7ab6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Td2hxvXV wl9GV4t.png", cAlternateFileName="TD2HXV~1.PNG")) returned 1 [0213.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Td2hxvXV wl9GV4t.png" (normalized: "c:\\users\\fd1hvy\\desktop\\td2hxvxv wl9gv4t.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0213.479] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0213.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.480] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0213.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0213.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ab6, lpOverlapped=0x0) returned 1 [0213.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe54a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ac0, lpOverlapped=0x0) returned 1 [0213.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.484] CloseHandle (hObject=0x1ec) returned 1 [0213.484] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.484] SetEndOfFile (hFile=0x1dc) returned 1 [0213.484] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Td2hxvXV wl9GV4t.png" (normalized: "c:\\users\\fd1hvy\\desktop\\td2hxvxv wl9gv4t.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Td2hxvXV wl9GV4t.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\td2hxvxv wl9gv4t.png.vhd")) returned 1 [0213.485] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf46100, ftCreationTime.dwHighDateTime=0x1d5e731, ftLastAccessTime.dwLowDateTime=0xb8aeb900, ftLastAccessTime.dwHighDateTime=0x1d5ec43, ftLastWriteTime.dwLowDateTime=0xb8aeb900, ftLastWriteTime.dwHighDateTime=0x1d5ec43, nFileSizeHigh=0x0, nFileSizeLow=0x12019, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TVuqDTLrkB.mp3", cAlternateFileName="TVUQDT~1.MP3")) returned 1 [0213.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TVuqDTLrkB.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\tvuqdtlrkb.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0213.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.495] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c10 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.495] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.495] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.496] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c10 | out: hHeap=0x2830000) returned 1 [0213.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19, lpOverlapped=0x0) returned 1 [0213.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffe7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x20, lpOverlapped=0x0) returned 1 [0213.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.501] CloseHandle (hObject=0x1ec) returned 1 [0213.502] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.502] SetEndOfFile (hFile=0x1dc) returned 1 [0213.502] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\TVuqDTLrkB.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\tvuqdtlrkb.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\TVuqDTLrkB.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\tvuqdtlrkb.mp3.vhd")) returned 1 [0213.503] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a4b4f0, ftCreationTime.dwHighDateTime=0x1d5ea95, ftLastAccessTime.dwLowDateTime=0x60b48bb0, ftLastAccessTime.dwHighDateTime=0x1d5e13c, ftLastWriteTime.dwLowDateTime=0x60b48bb0, ftLastWriteTime.dwHighDateTime=0x1d5e13c, nFileSizeHigh=0x0, nFileSizeLow=0x51b3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vB-aSg.ods", cAlternateFileName="")) returned 1 [0213.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vB-aSg.ods" (normalized: "c:\\users\\fd1hvy\\desktop\\vb-asg.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.516] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.516] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.516] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0213.516] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.517] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0213.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0213.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x11b3, lpOverlapped=0x0) returned 1 [0213.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee4d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x11c0, lpOverlapped=0x0) returned 1 [0213.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.520] CloseHandle (hObject=0x1ec) returned 1 [0213.521] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.521] SetEndOfFile (hFile=0x1dc) returned 1 [0213.521] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\vB-aSg.ods" (normalized: "c:\\users\\fd1hvy\\desktop\\vb-asg.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\vB-aSg.ods.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\vb-asg.ods.vhd")) returned 1 [0213.522] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac166750, ftCreationTime.dwHighDateTime=0x1d5e9a6, ftLastAccessTime.dwLowDateTime=0x3f68b9f0, ftLastAccessTime.dwHighDateTime=0x1d5e550, ftLastWriteTime.dwLowDateTime=0x3f68b9f0, ftLastWriteTime.dwHighDateTime=0x1d5e550, nFileSizeHigh=0x0, nFileSizeLow=0x1490, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vhKVxG2bnxk.m4a", cAlternateFileName="VHKVXG~1.M4A")) returned 1 [0213.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vhKVxG2bnxk.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\vhkvxg2bnxk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.568] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.568] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.569] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.569] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.569] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.570] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0213.571] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.571] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1490, lpOverlapped=0x0) returned 1 [0213.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb70, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1490, lpOverlapped=0x0) returned 1 [0213.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.572] CloseHandle (hObject=0x1ec) returned 1 [0213.572] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.572] SetEndOfFile (hFile=0x1dc) returned 1 [0213.572] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\vhKVxG2bnxk.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\vhkvxg2bnxk.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\vhKVxG2bnxk.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\vhkvxg2bnxk.m4a.vhd")) returned 1 [0213.574] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e10490, ftCreationTime.dwHighDateTime=0x1d5eae8, ftLastAccessTime.dwLowDateTime=0xdc224270, ftLastAccessTime.dwHighDateTime=0x1d5ea00, ftLastWriteTime.dwLowDateTime=0xdc224270, ftLastWriteTime.dwHighDateTime=0x1d5ea00, nFileSizeHigh=0x0, nFileSizeLow=0xaa63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wAlq9GdQ0.swf", cAlternateFileName="WALQ9G~1.SWF")) returned 1 [0213.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wAlq9GdQ0.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\walq9gdq0.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6488 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6488 | out: hHeap=0x2830000) returned 1 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.584] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.584] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0213.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa63, lpOverlapped=0x0) returned 1 [0213.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff59d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa70, lpOverlapped=0x0) returned 1 [0213.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.598] CloseHandle (hObject=0x1ec) returned 1 [0213.598] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.598] SetEndOfFile (hFile=0x1dc) returned 1 [0213.598] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\wAlq9GdQ0.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\walq9gdq0.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\wAlq9GdQ0.swf.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\walq9gdq0.swf.vhd")) returned 1 [0213.599] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6168240, ftCreationTime.dwHighDateTime=0x1d5efe9, ftLastAccessTime.dwLowDateTime=0xf1754a70, ftLastAccessTime.dwHighDateTime=0x1d5e229, ftLastWriteTime.dwLowDateTime=0xf1754a70, ftLastWriteTime.dwHighDateTime=0x1d5e229, nFileSizeHigh=0x0, nFileSizeLow=0x782d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wEPPY3IM wMRO.ots", cAlternateFileName="WEPPY3~1.OTS")) returned 1 [0213.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wEPPY3IM wMRO.ots" (normalized: "c:\\users\\fd1hvy\\desktop\\weppy3im wmro.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0213.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0213.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.610] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0213.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0213.612] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.612] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x182d, lpOverlapped=0x0) returned 1 [0213.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe7d3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1830, lpOverlapped=0x0) returned 1 [0213.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.614] CloseHandle (hObject=0x1ec) returned 1 [0213.615] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.615] SetEndOfFile (hFile=0x1dc) returned 1 [0213.615] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\wEPPY3IM wMRO.ots" (normalized: "c:\\users\\fd1hvy\\desktop\\weppy3im wmro.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\wEPPY3IM wMRO.ots.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\weppy3im wmro.ots.vhd")) returned 1 [0213.616] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ead440, ftCreationTime.dwHighDateTime=0x1d5e291, ftLastAccessTime.dwLowDateTime=0xf624cb40, ftLastAccessTime.dwHighDateTime=0x1d5e0d5, ftLastWriteTime.dwLowDateTime=0xf624cb40, ftLastWriteTime.dwHighDateTime=0x1d5e0d5, nFileSizeHigh=0x0, nFileSizeLow=0x1efd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WIUtlxzJ.jpg", cAlternateFileName="")) returned 1 [0213.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WIUtlxzJ.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wiutlxzj.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0213.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0213.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.634] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0213.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.634] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.634] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.634] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0213.635] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.635] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1efd, lpOverlapped=0x0) returned 1 [0213.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe103, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f00, lpOverlapped=0x0) returned 1 [0213.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.637] CloseHandle (hObject=0x1ec) returned 1 [0213.637] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.637] SetEndOfFile (hFile=0x1dc) returned 1 [0213.637] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\WIUtlxzJ.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wiutlxzj.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\WIUtlxzJ.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\wiutlxzj.jpg.vhd")) returned 1 [0213.650] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b6c2c0, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0x96798ec0, ftLastAccessTime.dwHighDateTime=0x1d5e3cc, ftLastWriteTime.dwLowDateTime=0x96798ec0, ftLastWriteTime.dwHighDateTime=0x1d5e3cc, nFileSizeHigh=0x0, nFileSizeLow=0xb529, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YwU0hbSEbq4.jpg", cAlternateFileName="YWU0HB~1.JPG")) returned 1 [0213.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\YwU0hbSEbq4.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\ywu0hbsebq4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0213.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6498 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6498 | out: hHeap=0x2830000) returned 1 [0213.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.665] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0213.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.669] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0213.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.669] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.669] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1529, lpOverlapped=0x0) returned 1 [0213.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffead7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1530, lpOverlapped=0x0) returned 1 [0213.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.672] CloseHandle (hObject=0x1ec) returned 1 [0213.673] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.673] SetEndOfFile (hFile=0x1dc) returned 1 [0213.673] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\YwU0hbSEbq4.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\ywu0hbsebq4.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\YwU0hbSEbq4.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\ywu0hbsebq4.jpg.vhd")) returned 1 [0213.674] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c833090, ftCreationTime.dwHighDateTime=0x1d5e553, ftLastAccessTime.dwLowDateTime=0x2464b5c0, ftLastAccessTime.dwHighDateTime=0x1d5ec01, ftLastWriteTime.dwLowDateTime=0x2464b5c0, ftLastWriteTime.dwHighDateTime=0x1d5ec01, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zehlj7Yba.ots", cAlternateFileName="ZEHLJ7~1.OTS")) returned 1 [0213.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Zehlj7Yba.ots" (normalized: "c:\\users\\fd1hvy\\desktop\\zehlj7yba.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7918 [0213.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7918 | out: hHeap=0x2830000) returned 1 [0213.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.684] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0213.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0213.685] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf8f, lpOverlapped=0x0) returned 1 [0213.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff071, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf90, lpOverlapped=0x0) returned 1 [0213.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.687] CloseHandle (hObject=0x1ec) returned 1 [0213.687] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.687] SetEndOfFile (hFile=0x1dc) returned 1 [0213.687] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Zehlj7Yba.ots" (normalized: "c:\\users\\fd1hvy\\desktop\\zehlj7yba.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Zehlj7Yba.ots.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\zehlj7yba.ots.vhd")) returned 1 [0213.688] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb03c2610, ftCreationTime.dwHighDateTime=0x1d5ed31, ftLastAccessTime.dwLowDateTime=0xc2d7b010, ftLastAccessTime.dwHighDateTime=0x1d5f09b, ftLastWriteTime.dwLowDateTime=0xc2d7b010, ftLastWriteTime.dwHighDateTime=0x1d5f09b, nFileSizeHigh=0x0, nFileSizeLow=0x2273, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zLs76fiuG Z4b5YzX.mp3", cAlternateFileName="ZLS76F~1.MP3")) returned 1 [0213.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zLs76fiuG Z4b5YzX.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\zls76fiug z4b5yzx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0213.707] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0213.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.707] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde63f8 [0213.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde63f8 | out: hHeap=0x2830000) returned 1 [0213.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.708] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0213.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.708] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.708] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0213.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x273, lpOverlapped=0x0) returned 1 [0213.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd8d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0213.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.711] CloseHandle (hObject=0x1ec) returned 1 [0213.711] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.711] SetEndOfFile (hFile=0x1dc) returned 1 [0213.711] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\zLs76fiuG Z4b5YzX.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\zls76fiug z4b5yzx.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\zLs76fiuG Z4b5YzX.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\zls76fiug z4b5yzx.mp3.vhd")) returned 1 [0213.712] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4177c0, ftCreationTime.dwHighDateTime=0x1d5e60e, ftLastAccessTime.dwLowDateTime=0x2c571e80, ftLastAccessTime.dwHighDateTime=0x1d5e4b8, ftLastWriteTime.dwLowDateTime=0x2c571e80, ftLastWriteTime.dwHighDateTime=0x1d5e4b8, nFileSizeHigh=0x0, nFileSizeLow=0x90d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zTu3o-HvTj.ots", cAlternateFileName="ZTU3O-~1.OTS")) returned 1 [0213.712] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zTu3o-HvTj.ots" (normalized: "c:\\users\\fd1hvy\\desktop\\ztu3o-hvtj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0213.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.722] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0213.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x90d, lpOverlapped=0x0) returned 1 [0213.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6f3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x910, lpOverlapped=0x0) returned 1 [0213.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.725] CloseHandle (hObject=0x1ec) returned 1 [0213.725] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.725] SetEndOfFile (hFile=0x1dc) returned 1 [0213.725] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\zTu3o-HvTj.ots" (normalized: "c:\\users\\fd1hvy\\desktop\\ztu3o-hvtj.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\zTu3o-HvTj.ots.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\ztu3o-hvtj.ots.vhd")) returned 1 [0213.726] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70faf510, ftCreationTime.dwHighDateTime=0x1d5e5f9, ftLastAccessTime.dwLowDateTime=0x56872b00, ftLastAccessTime.dwHighDateTime=0x1d5e1ca, ftLastWriteTime.dwLowDateTime=0x56872b00, ftLastWriteTime.dwHighDateTime=0x1d5e1ca, nFileSizeHigh=0x0, nFileSizeLow=0x86ad, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_-cWRQMsuNgJOOk.bmp", cAlternateFileName="_-CWRQ~1.BMP")) returned 1 [0213.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_-cWRQMsuNgJOOk.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\_-cwrqmsungjook.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.891] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.891] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.891] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0213.891] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0213.891] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.891] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.891] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.891] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.891] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.891] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.891] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.891] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.892] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0213.892] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.892] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.892] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.892] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.892] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0213.892] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6ad, lpOverlapped=0x0) returned 1 [0213.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff953, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6b0, lpOverlapped=0x0) returned 1 [0213.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.895] CloseHandle (hObject=0x1ec) returned 1 [0213.895] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.895] SetEndOfFile (hFile=0x1dc) returned 1 [0213.895] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\_-cWRQMsuNgJOOk.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\_-cwrqmsungjook.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\_-cWRQMsuNgJOOk.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\_-cwrqmsungjook.bmp.vhd")) returned 1 [0213.896] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6f0240, ftCreationTime.dwHighDateTime=0x1d5eb42, ftLastAccessTime.dwLowDateTime=0x286e430, ftLastAccessTime.dwHighDateTime=0x1d5e875, ftLastWriteTime.dwLowDateTime=0x286e430, ftLastWriteTime.dwHighDateTime=0x1d5e875, nFileSizeHigh=0x0, nFileSizeLow=0xeb30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_E m4SI-Lbt.mp4", cAlternateFileName="_EM4SI~1.MP4")) returned 1 [0213.896] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_E m4SI-Lbt.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\_e m4si-lbt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0213.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0213.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6378 [0213.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6378 | out: hHeap=0x2830000) returned 1 [0213.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.942] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.942] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.942] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0213.942] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.942] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.942] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.942] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0213.943] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0213.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0213.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb30, lpOverlapped=0x0) returned 1 [0213.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb30, lpOverlapped=0x0) returned 1 [0213.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.946] CloseHandle (hObject=0x1ec) returned 1 [0213.946] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.946] SetEndOfFile (hFile=0x1dc) returned 1 [0213.946] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\_E m4SI-Lbt.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\_e m4si-lbt.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\_E m4SI-Lbt.mp4.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\_e m4si-lbt.mp4.vhd")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6f0240, ftCreationTime.dwHighDateTime=0x1d5eb42, ftLastAccessTime.dwLowDateTime=0x286e430, ftLastAccessTime.dwHighDateTime=0x1d5e875, ftLastWriteTime.dwLowDateTime=0x286e430, ftLastWriteTime.dwHighDateTime=0x1d5e875, nFileSizeHigh=0x0, nFileSizeLow=0xeb30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_E m4SI-Lbt.mp4", cAlternateFileName="_EM4SI~1.MP4")) returned 0 [0213.947] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0213.947] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0213.947] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.947] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0213.947] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0213.948] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.948] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0213.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde63f8 [0213.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x3c) returned 0xde86e8 [0213.948] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0213.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6378 [0213.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x42) returned 0xde6c10 [0213.948] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe98d5b00, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe98d5b00, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0213.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6408 [0213.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x40) returned 0xde8898 [0213.948] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe98d5b00, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe98d5b00, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0213.948] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0213.948] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24558 [0213.948] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.948] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.948] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.948] FindClose (in: hFindFile=0xd24558 | out: hFindFile=0xd24558) returned 1 [0213.948] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0213.949] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.949] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0213.949] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0213.949] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.949] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0213.949] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0213.949] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0213.949] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0213.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.967] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0213.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0213.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0213.968] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0213.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0213.968] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0213.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3c0, lpOverlapped=0x0) returned 1 [0213.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3c0, lpOverlapped=0x0) returned 1 [0213.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0213.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0213.969] CloseHandle (hObject=0x1ec) returned 1 [0213.969] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.969] SetEndOfFile (hFile=0x1dc) returned 1 [0213.969] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.vhd" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.vhd")) returned 1 [0213.971] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0213.971] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0213.971] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0213.971] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.971] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.971] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.971] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0213.971] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0214.717] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.717] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0214.717] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0214.717] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0214.717] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0214.717] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0214.717] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0214.718] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0214.718] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.718] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0214.718] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0214.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0214.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0214.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0214.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0214.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0214.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.726] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0214.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0214.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0214.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0214.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0214.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0214.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x852, lpOverlapped=0x0) returned 1 [0214.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff7ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x860, lpOverlapped=0x0) returned 1 [0214.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0214.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0214.734] CloseHandle (hObject=0x1ec) returned 1 [0214.734] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.734] SetEndOfFile (hFile=0x1dc) returned 1 [0214.734] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk.vhd" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk.vhd")) returned 1 [0214.735] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0214.735] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0214.735] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0214.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0214.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.743] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6ee0 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0214.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0214.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6ee0 | out: hHeap=0x2830000) returned 1 [0214.744] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0214.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.744] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0214.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x91a, lpOverlapped=0x0) returned 1 [0214.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6e6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x920, lpOverlapped=0x0) returned 1 [0214.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0214.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0214.745] CloseHandle (hObject=0x1ec) returned 1 [0214.745] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.745] SetEndOfFile (hFile=0x1dc) returned 1 [0214.745] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.vhd" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.vhd")) returned 1 [0214.746] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0214.746] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0214.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0214.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0214.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0214.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0214.753] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0214.753] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0214.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0214.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6438 [0214.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0214.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6438 | out: hHeap=0x2830000) returned 1 [0214.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0214.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.754] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0214.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0214.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0214.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0214.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0214.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0214.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0214.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0214.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0214.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3e7, lpOverlapped=0x0) returned 1 [0214.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc19, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3f0, lpOverlapped=0x0) returned 1 [0214.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0214.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0214.756] CloseHandle (hObject=0x1ec) returned 1 [0214.756] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.756] SetEndOfFile (hFile=0x1dc) returned 1 [0214.756] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.vhd" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.vhd")) returned 1 [0214.756] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0214.757] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0214.757] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd241d8 [0215.063] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.063] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0215.063] FindNextFileW (in: hFindFile=0xd241d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0215.063] FindClose (in: hFindFile=0xd241d8 | out: hFindFile=0xd241d8) returned 1 [0215.063] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0215.066] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.066] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0215.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6438 [0215.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5a) returned 0xde34e0 [0215.067] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0215.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6448 [0215.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5a) returned 0xde3340 [0215.067] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0215.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6488 [0215.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x36) returned 0xde5c30 [0215.067] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0215.067] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0215.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0215.068] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.068] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0215.068] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 0 [0215.068] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0215.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24198 [0215.069] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.069] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6498 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5a) returned 0xde2e60 [0215.069] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde64a8 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x58) returned 0xde1d00 [0215.069] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde64d8 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x48) returned 0xde6ee0 [0215.069] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde64f8 [0215.069] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xde67b0 [0215.069] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0 [0215.069] FindClose (in: hFindFile=0xd24198 | out: hFindFile=0xd24198) returned 1 [0215.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24258 [0215.072] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.072] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.072] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde65a8 [0215.072] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283d448 [0215.072] FindNextFileW (in: hFindFile=0xd24258, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.072] FindClose (in: hFindFile=0xd24258 | out: hFindFile=0xd24258) returned 1 [0215.072] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0215.072] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.072] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0215.072] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0215.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0215.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0215.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6668 [0215.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6668 | out: hHeap=0x2830000) returned 1 [0215.082] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.082] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.082] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0215.082] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0215.082] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0215.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2ee, lpOverlapped=0x0) returned 1 [0215.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2f0, lpOverlapped=0x0) returned 1 [0215.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.084] CloseHandle (hObject=0x1ec) returned 1 [0215.084] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.084] SetEndOfFile (hFile=0x1dc) returned 1 [0215.084] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.vhd")) returned 1 [0215.085] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0215.085] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0215.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6598 [0215.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6598 | out: hHeap=0x2830000) returned 1 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.094] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0215.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0215.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0215.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe30, lpOverlapped=0x0) returned 1 [0215.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe30, lpOverlapped=0x0) returned 1 [0215.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.293] CloseHandle (hObject=0x1ec) returned 1 [0215.293] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.293] SetEndOfFile (hFile=0x1dc) returned 1 [0215.398] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.vhd" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.vhd")) returned 1 [0215.399] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0215.399] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0215.399] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0215.403] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.403] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0215.403] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0215.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6698 [0215.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6698 | out: hHeap=0x2830000) returned 1 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.417] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0215.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.418] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.418] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.419] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0215.419] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.422] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.422] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x27e, lpOverlapped=0x0) returned 1 [0215.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0215.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.424] CloseHandle (hObject=0x1ec) returned 1 [0215.425] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.425] SetEndOfFile (hFile=0x1dc) returned 1 [0215.425] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.vhd")) returned 1 [0215.426] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0215.426] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0215.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0215.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0215.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6608 [0215.463] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.463] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.463] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6608 | out: hHeap=0x2830000) returned 1 [0215.463] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.463] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.464] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0215.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0215.464] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.464] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.465] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0215.465] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.465] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.465] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1080, lpOverlapped=0x0) returned 1 [0215.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1080, lpOverlapped=0x0) returned 1 [0215.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.491] CloseHandle (hObject=0x1ec) returned 1 [0215.491] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.491] SetEndOfFile (hFile=0x1dc) returned 1 [0215.491] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.vhd" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.vhd")) returned 1 [0215.492] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0215.492] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0215.492] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0215.492] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.492] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0215.492] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65d8 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65d8 | out: hHeap=0x2830000) returned 1 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.505] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0215.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.506] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0215.506] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.506] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.506] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2ee, lpOverlapped=0x0) returned 1 [0215.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2f0, lpOverlapped=0x0) returned 1 [0215.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.507] CloseHandle (hObject=0x1ec) returned 1 [0215.507] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.507] SetEndOfFile (hFile=0x1dc) returned 1 [0215.507] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.vhd")) returned 1 [0215.508] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0215.508] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0215.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde8b20 [0215.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde64e8 [0215.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde64e8 | out: hHeap=0x2830000) returned 1 [0215.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.539] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0215.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde8b20 [0215.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde8b20 | out: hHeap=0x2830000) returned 1 [0215.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0215.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe38, lpOverlapped=0x0) returned 1 [0215.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe40, lpOverlapped=0x0) returned 1 [0215.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.649] CloseHandle (hObject=0x1ec) returned 1 [0215.649] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.649] SetEndOfFile (hFile=0x1dc) returned 1 [0215.691] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.vhd" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.vhd")) returned 1 [0215.692] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0215.692] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0215.692] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0215.692] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.693] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6548 [0215.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb2) returned 0xde9088 [0215.693] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.693] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0215.693] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0215.694] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.694] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6678 [0215.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283dac0 [0215.694] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.694] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0215.698] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24398 [0215.700] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.700] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0215.700] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0215.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0215.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0215.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0215.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0215.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.710] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0215.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0215.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0215.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x272, lpOverlapped=0x0) returned 1 [0215.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0215.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.712] CloseHandle (hObject=0x1ec) returned 1 [0215.712] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.712] SetEndOfFile (hFile=0x1dc) returned 1 [0215.713] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.vhd")) returned 1 [0215.713] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0215.713] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0215.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0215.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0215.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6648 [0215.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6648 | out: hHeap=0x2830000) returned 1 [0215.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.726] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0215.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0215.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0215.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.802] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1398, lpOverlapped=0x0) returned 1 [0215.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x13a0, lpOverlapped=0x0) returned 1 [0215.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.819] CloseHandle (hObject=0x1ec) returned 1 [0215.819] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.819] SetEndOfFile (hFile=0x1dc) returned 1 [0215.820] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.vhd" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.vhd")) returned 1 [0215.821] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0215.821] FindClose (in: hFindFile=0xd24398 | out: hFindFile=0xd24398) returned 1 [0215.821] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0215.823] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.823] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.823] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde64e8 [0215.823] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283d950 [0215.823] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.823] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0215.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0215.825] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.825] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.825] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6648 [0215.825] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283e1f0 [0215.825] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.825] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0215.825] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0215.826] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.826] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.826] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6538 [0215.826] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283e2a8 [0215.826] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.826] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0215.826] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0215.856] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.857] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde65b8 [0215.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283dce8 [0215.857] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.857] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0215.858] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24398 [0215.859] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.859] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.859] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6588 [0215.859] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb2) returned 0xde8b48 [0215.859] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.859] FindClose (in: hFindFile=0xd24398 | out: hFindFile=0xd24398) returned 1 [0215.859] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0215.860] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.860] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6568 [0215.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb2) returned 0xde9448 [0215.860] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.860] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0215.860] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0215.861] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.861] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6578 [0215.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb2) returned 0xde8c08 [0215.861] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.862] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0215.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0215.862] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.862] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0215.862] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0215.878] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0215.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0215.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0215.878] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.878] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.878] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0215.878] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.878] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.879] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0215.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0215.879] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.879] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0215.880] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.880] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x27e, lpOverlapped=0x0) returned 1 [0215.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0215.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.882] CloseHandle (hObject=0x1ec) returned 1 [0215.882] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.882] SetEndOfFile (hFile=0x1dc) returned 1 [0215.882] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.vhd")) returned 1 [0215.883] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0215.883] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0215.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0215.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.894] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0215.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0215.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0215.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0215.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0215.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0215.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0215.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0215.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0215.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10a8, lpOverlapped=0x0) returned 1 [0215.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10b0, lpOverlapped=0x0) returned 1 [0215.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0215.963] CloseHandle (hObject=0x1ec) returned 1 [0215.963] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.963] SetEndOfFile (hFile=0x1dc) returned 1 [0215.963] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.vhd" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.vhd")) returned 1 [0215.964] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0215.964] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0215.964] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0215.966] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.966] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0215.966] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6518 [0215.966] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283e360 [0215.966] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0215.984] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0215.984] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0215.985] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.985] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0215.985] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0215.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0215.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0215.997] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0215.997] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0215.997] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0215.997] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0216.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0216.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0216.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.035] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0216.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.037] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0216.037] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.037] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.037] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x272, lpOverlapped=0x0) returned 1 [0216.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0216.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.040] CloseHandle (hObject=0x1ec) returned 1 [0216.041] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.041] SetEndOfFile (hFile=0x1dc) returned 1 [0216.041] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.vhd")) returned 1 [0216.042] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0216.042] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0216.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0216.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6608 [0216.063] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.063] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.063] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6608 | out: hHeap=0x2830000) returned 1 [0216.063] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.064] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.064] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0216.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.064] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.064] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0216.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1428, lpOverlapped=0x0) returned 1 [0216.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1430, lpOverlapped=0x0) returned 1 [0216.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.116] CloseHandle (hObject=0x1ec) returned 1 [0216.116] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.116] SetEndOfFile (hFile=0x1dc) returned 1 [0216.149] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.vhd" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.vhd")) returned 1 [0216.150] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0216.150] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0216.150] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0216.150] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.151] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0216.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde65e8 [0216.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb0) returned 0x283d500 [0216.151] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0216.151] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0216.151] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7fc3b83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xd7fc3b83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0216.151] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7fc3b83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xd7fc3b83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.151] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1 [0216.151] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0216.160] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0216.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6638 [0216.160] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.160] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.160] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6638 | out: hHeap=0x2830000) returned 1 [0216.160] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.160] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.161] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0216.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.161] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.161] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0216.162] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.162] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a, lpOverlapped=0x0) returned 1 [0216.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffe6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x20, lpOverlapped=0x0) returned 1 [0216.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.163] CloseHandle (hObject=0x1ec) returned 1 [0216.164] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.164] SetEndOfFile (hFile=0x1dc) returned 1 [0216.164] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), lpNewFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.vhd" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml.vhd")) returned 1 [0216.165] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7ad8f08, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xd7f5157d, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0216.165] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0216.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0216.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0216.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0216.182] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.183] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0216.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0216.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5a4, lpOverlapped=0x0) returned 1 [0216.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5b0, lpOverlapped=0x0) returned 1 [0216.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.186] CloseHandle (hObject=0x1ec) returned 1 [0216.186] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.186] SetEndOfFile (hFile=0x1dc) returned 1 [0216.237] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), lpNewFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.vhd" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.vhd")) returned 1 [0216.238] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7ad8f08, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xd7f5157d, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0216.238] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0216.238] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa15a1d83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa15a1d83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24458 [0216.239] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa15a1d83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa15a1d83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.240] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0216.240] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7918 [0216.255] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7918 | out: hHeap=0x2830000) returned 1 [0216.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6618 [0216.255] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6618 | out: hHeap=0x2830000) returned 1 [0216.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.256] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0216.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0216.258] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.260] CloseHandle (hObject=0x1ec) returned 1 [0216.260] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.260] SetEndOfFile (hFile=0x1dc) returned 1 [0216.260] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl.vhd")) returned 1 [0216.261] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0216.261] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6608 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6608 | out: hHeap=0x2830000) returned 1 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.369] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.371] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0216.371] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.371] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.371] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.377] CloseHandle (hObject=0x1ec) returned 1 [0216.378] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.378] SetEndOfFile (hFile=0x1dc) returned 1 [0216.378] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl.vhd")) returned 1 [0216.379] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0216.379] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0216.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0216.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.400] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.402] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0216.402] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.402] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.402] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.405] CloseHandle (hObject=0x1ec) returned 1 [0216.405] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.405] SetEndOfFile (hFile=0x1dc) returned 1 [0216.405] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl.vhd")) returned 1 [0216.406] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0216.406] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.457] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0216.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6628 [0216.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6628 | out: hHeap=0x2830000) returned 1 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.458] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0216.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.459] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.459] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.459] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0216.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.463] CloseHandle (hObject=0x1ec) returned 1 [0216.463] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.463] SetEndOfFile (hFile=0x1dc) returned 1 [0216.463] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl.vhd")) returned 1 [0216.464] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0216.464] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0216.479] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0216.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6628 [0216.479] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.479] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.479] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6628 | out: hHeap=0x2830000) returned 1 [0216.479] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.479] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.479] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0216.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.480] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.480] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0216.481] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.481] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.500] CloseHandle (hObject=0x1ec) returned 1 [0216.501] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.501] SetEndOfFile (hFile=0x1dc) returned 1 [0216.501] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl.vhd")) returned 1 [0216.502] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0216.502] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0216.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0216.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0216.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.517] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0216.517] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.518] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0216.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.518] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.518] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.519] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0216.519] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.520] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.520] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.522] CloseHandle (hObject=0x1ec) returned 1 [0216.522] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.522] SetEndOfFile (hFile=0x1dc) returned 1 [0216.522] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl.vhd")) returned 1 [0216.523] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0216.523] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0216.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6698 [0216.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6698 | out: hHeap=0x2830000) returned 1 [0216.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.545] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0216.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.616] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.617] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.617] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0216.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.626] CloseHandle (hObject=0x1ec) returned 1 [0216.626] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.626] SetEndOfFile (hFile=0x1dc) returned 1 [0216.627] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl.vhd")) returned 1 [0216.627] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0216.628] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0216.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0216.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0216.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0216.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.641] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0216.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.641] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.641] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0216.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.650] CloseHandle (hObject=0x1ec) returned 1 [0216.650] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.650] SetEndOfFile (hFile=0x1dc) returned 1 [0216.650] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl.vhd")) returned 1 [0216.651] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0216.651] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0216.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0216.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0216.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0216.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.665] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0216.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0216.667] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.710] CloseHandle (hObject=0x1ec) returned 1 [0216.710] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.710] SetEndOfFile (hFile=0x1dc) returned 1 [0216.787] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl.vhd")) returned 1 [0216.788] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0216.788] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.805] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.805] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.805] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0216.806] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0216.806] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.806] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0216.806] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.806] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.806] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0216.806] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.806] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.807] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0216.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.807] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.807] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.808] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0216.808] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.808] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.808] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.815] CloseHandle (hObject=0x1ec) returned 1 [0216.815] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.815] SetEndOfFile (hFile=0x1dc) returned 1 [0216.832] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl.vhd")) returned 1 [0216.833] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0216.833] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0216.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0216.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0216.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0216.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.846] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0216.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0216.848] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.883] CloseHandle (hObject=0x1ec) returned 1 [0216.883] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.883] SetEndOfFile (hFile=0x1dc) returned 1 [0216.918] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl.vhd")) returned 1 [0216.919] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0216.919] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0216.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0216.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0216.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0216.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.964] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0216.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0216.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0216.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0216.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0216.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0216.968] CloseHandle (hObject=0x1ec) returned 1 [0216.968] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.968] SetEndOfFile (hFile=0x1dc) returned 1 [0216.968] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl.vhd")) returned 1 [0216.968] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0216.969] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0216.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0216.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0216.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0216.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0216.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0216.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0216.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0216.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6618 [0216.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6618 | out: hHeap=0x2830000) returned 1 [0216.983] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.983] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0216.983] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0216.983] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0216.983] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0216.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0216.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.984] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0216.984] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0216.984] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0216.984] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0216.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.242] CloseHandle (hObject=0x1ec) returned 1 [0217.242] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.242] SetEndOfFile (hFile=0x1dc) returned 1 [0217.281] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl.vhd")) returned 1 [0217.282] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0217.282] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0217.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0217.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6668 [0217.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6668 | out: hHeap=0x2830000) returned 1 [0217.296] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.296] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.297] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0217.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.297] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.297] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.298] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0217.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.298] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.298] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.302] CloseHandle (hObject=0x1ec) returned 1 [0217.302] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.302] SetEndOfFile (hFile=0x1dc) returned 1 [0217.302] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl.vhd")) returned 1 [0217.303] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0217.303] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.321] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0217.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6698 [0217.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6698 | out: hHeap=0x2830000) returned 1 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.322] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.323] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0217.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.355] CloseHandle (hObject=0x1ec) returned 1 [0217.355] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.355] SetEndOfFile (hFile=0x1dc) returned 1 [0217.396] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl.vhd")) returned 1 [0217.397] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0217.397] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0217.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0217.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6598 [0217.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.417] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6598 | out: hHeap=0x2830000) returned 1 [0217.417] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.418] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.418] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.418] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0217.418] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.418] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.418] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.418] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0217.423] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.423] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.425] CloseHandle (hObject=0x1ec) returned 1 [0217.425] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.425] SetEndOfFile (hFile=0x1dc) returned 1 [0217.425] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl.vhd")) returned 1 [0217.426] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0217.426] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.443] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.443] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.443] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0217.443] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0217.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0217.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0217.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.444] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0217.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.444] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.444] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0217.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.463] CloseHandle (hObject=0x1ec) returned 1 [0217.463] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.463] SetEndOfFile (hFile=0x1dc) returned 1 [0217.495] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl.vhd")) returned 1 [0217.496] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0217.496] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0217.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0217.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.538] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.538] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0217.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.549] CloseHandle (hObject=0x1ec) returned 1 [0217.549] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.549] SetEndOfFile (hFile=0x1dc) returned 1 [0217.549] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl.vhd")) returned 1 [0217.550] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0217.550] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.563] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.563] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0217.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0217.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0217.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.575] CloseHandle (hObject=0x1ec) returned 1 [0217.575] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.575] SetEndOfFile (hFile=0x1dc) returned 1 [0217.647] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl.vhd")) returned 1 [0217.647] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa15a1d83, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xa15a1d83, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0217.648] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcfcbff7d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xcfcbff7d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0217.648] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0217.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0217.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0217.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0217.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.659] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0217.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.660] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0217.660] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.660] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.660] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.663] CloseHandle (hObject=0x1ec) returned 1 [0217.663] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.663] SetEndOfFile (hFile=0x1dc) returned 1 [0217.663] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl.vhd")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x917b63d4, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb8b481f0, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0217.664] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0217.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0217.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.679] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0217.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0217.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.680] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0217.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.681] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0217.682] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.682] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0217.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0217.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.692] CloseHandle (hObject=0x1ec) returned 1 [0217.692] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.692] SetEndOfFile (hFile=0x1dc) returned 1 [0217.728] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl.vhd")) returned 1 [0217.729] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x150f0f86, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39296693, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0217.729] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0217.741] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6528 [0217.741] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.741] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.741] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6528 | out: hHeap=0x2830000) returned 1 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.741] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.741] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0217.742] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.742] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.742] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.742] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0217.743] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.743] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.745] CloseHandle (hObject=0x1ec) returned 1 [0217.745] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.745] SetEndOfFile (hFile=0x1dc) returned 1 [0217.746] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl.vhd")) returned 1 [0217.746] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1f83bc0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x32ea756e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0217.746] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0217.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6688 [0217.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6688 | out: hHeap=0x2830000) returned 1 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.757] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0217.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0217.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0217.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0217.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.784] CloseHandle (hObject=0x1ec) returned 1 [0217.784] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.784] SetEndOfFile (hFile=0x1dc) returned 1 [0217.809] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl.vhd")) returned 1 [0217.810] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfdc37a18, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x290206fd, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0217.810] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0217.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0217.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0217.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0217.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.821] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0217.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0217.822] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0217.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0217.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.825] CloseHandle (hObject=0x1ec) returned 1 [0217.830] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.830] SetEndOfFile (hFile=0x1dc) returned 1 [0217.845] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl.vhd")) returned 1 [0217.846] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8a5979b2, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8a5979b2, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0217.846] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.856] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.864] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.864] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0217.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0217.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6638 [0217.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6638 | out: hHeap=0x2830000) returned 1 [0217.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.865] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0217.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0217.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0217.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0217.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.868] CloseHandle (hObject=0x1ec) returned 1 [0217.869] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.869] SetEndOfFile (hFile=0x1dc) returned 1 [0217.869] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl.vhd")) returned 1 [0217.870] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcbc9fc38, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xefa43826, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0217.870] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0217.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0217.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.914] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.915] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0217.915] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.915] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.915] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0217.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.917] CloseHandle (hObject=0x1ec) returned 1 [0217.917] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.917] SetEndOfFile (hFile=0x1dc) returned 1 [0217.918] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl.vhd")) returned 1 [0217.918] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf1e2e9c9, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x1ca46d4f, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0217.919] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0217.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0217.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.962] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.962] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0217.962] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0217.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0217.963] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0217.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0217.963] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0217.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0217.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0217.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0217.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0217.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0217.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0217.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0217.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0217.987] CloseHandle (hObject=0x1ec) returned 1 [0217.987] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.987] SetEndOfFile (hFile=0x1dc) returned 1 [0217.987] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl.vhd")) returned 1 [0217.988] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf7e12839, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x26688c0b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0217.988] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0217.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0217.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0217.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0218.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0218.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.001] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0218.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0218.003] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.003] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.006] CloseHandle (hObject=0x1ec) returned 1 [0218.006] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.006] SetEndOfFile (hFile=0x1dc) returned 1 [0218.006] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl.vhd")) returned 1 [0218.007] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0218.007] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.023] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.023] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.025] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0218.025] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.025] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.025] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.027] CloseHandle (hObject=0x1ec) returned 1 [0218.027] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.027] SetEndOfFile (hFile=0x1dc) returned 1 [0218.028] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl.vhd")) returned 1 [0218.031] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0218.031] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0218.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0218.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0218.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0218.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.042] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0218.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.042] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.042] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0218.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.046] CloseHandle (hObject=0x1ec) returned 1 [0218.046] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.046] SetEndOfFile (hFile=0x1dc) returned 1 [0218.046] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl.vhd")) returned 1 [0218.047] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0218.047] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.049] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.057] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.057] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.057] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0218.057] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0218.057] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.057] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6668 [0218.057] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.057] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.057] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6668 | out: hHeap=0x2830000) returned 1 [0218.057] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.057] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.058] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.058] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0218.058] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.058] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.058] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.058] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.059] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0218.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.059] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.059] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.097] CloseHandle (hObject=0x1ec) returned 1 [0218.097] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.097] SetEndOfFile (hFile=0x1dc) returned 1 [0218.098] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl.vhd")) returned 1 [0218.099] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0218.100] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0218.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0218.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0218.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0218.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.112] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0218.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.112] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.112] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0218.114] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.114] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.115] CloseHandle (hObject=0x1ec) returned 1 [0218.115] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.115] SetEndOfFile (hFile=0x1dc) returned 1 [0218.115] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl.vhd")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0218.116] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0218.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6608 [0218.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6608 | out: hHeap=0x2830000) returned 1 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.127] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0218.129] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.162] CloseHandle (hObject=0x1ec) returned 1 [0218.162] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.162] SetEndOfFile (hFile=0x1dc) returned 1 [0218.183] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl.vhd")) returned 1 [0218.184] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0218.184] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.218] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.218] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.219] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.219] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.219] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.221] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0218.221] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.221] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.221] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.223] CloseHandle (hObject=0x1ec) returned 1 [0218.223] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.224] SetEndOfFile (hFile=0x1dc) returned 1 [0218.224] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl.vhd")) returned 1 [0218.225] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0218.225] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0218.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0218.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0218.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0218.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.237] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0218.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0218.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.238] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.250] CloseHandle (hObject=0x1ec) returned 1 [0218.250] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.250] SetEndOfFile (hFile=0x1dc) returned 1 [0218.282] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl.vhd")) returned 1 [0218.283] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0218.283] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0218.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0218.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6608 [0218.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6608 | out: hHeap=0x2830000) returned 1 [0218.300] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.300] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0218.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.301] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.301] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0218.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.309] CloseHandle (hObject=0x1ec) returned 1 [0218.309] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.309] SetEndOfFile (hFile=0x1dc) returned 1 [0218.309] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl.vhd")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0218.316] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6668 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6668 | out: hHeap=0x2830000) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.425] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.425] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.425] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.426] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0218.426] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.426] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.426] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.427] CloseHandle (hObject=0x1ec) returned 1 [0218.427] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.427] SetEndOfFile (hFile=0x1dc) returned 1 [0218.477] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl.vhd")) returned 1 [0218.477] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0218.478] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.020.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0218.496] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0218.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.496] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0218.496] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.496] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0218.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.497] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0218.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.497] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.497] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.501] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0218.501] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.501] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.501] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.503] CloseHandle (hObject=0x1ec) returned 1 [0218.503] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.503] SetEndOfFile (hFile=0x1dc) returned 1 [0218.503] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.020.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.020.etl.vhd")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0218.504] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.021.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0218.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0218.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0218.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0218.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.521] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0218.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.522] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.522] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0218.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.525] CloseHandle (hObject=0x1ec) returned 1 [0218.525] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.525] SetEndOfFile (hFile=0x1dc) returned 1 [0218.526] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.021.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.021.etl.vhd")) returned 1 [0218.526] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0218.526] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.022.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.538] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0218.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6558 [0218.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6558 | out: hHeap=0x2830000) returned 1 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.539] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0218.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.545] CloseHandle (hObject=0x1ec) returned 1 [0218.545] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.545] SetEndOfFile (hFile=0x1dc) returned 1 [0218.546] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.022.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.022.etl.vhd")) returned 1 [0218.546] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0218.546] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.023.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0218.558] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0218.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0218.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0218.559] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.559] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.559] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0218.559] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.559] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0218.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.568] CloseHandle (hObject=0x1ec) returned 1 [0218.568] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.568] SetEndOfFile (hFile=0x1dc) returned 1 [0218.568] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.023.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.023.etl.vhd")) returned 1 [0218.569] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0218.569] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.024.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0218.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0218.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6598 [0218.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6598 | out: hHeap=0x2830000) returned 1 [0218.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.579] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0218.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.580] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0218.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.583] CloseHandle (hObject=0x1ec) returned 1 [0218.583] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.583] SetEndOfFile (hFile=0x1dc) returned 1 [0218.583] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.024.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.024.etl.vhd")) returned 1 [0218.584] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UP4198~1.ETL")) returned 1 [0218.584] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.025.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0218.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6598 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6598 | out: hHeap=0x2830000) returned 1 [0218.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.596] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0218.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.596] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.598] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0218.598] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.598] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.598] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.599] CloseHandle (hObject=0x1ec) returned 1 [0218.599] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.599] SetEndOfFile (hFile=0x1dc) returned 1 [0218.599] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.025.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.025.etl.vhd")) returned 1 [0218.600] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UP96CC~1.ETL")) returned 1 [0218.600] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.026.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.663] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.663] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.663] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0218.663] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0218.663] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6598 [0218.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6598 | out: hHeap=0x2830000) returned 1 [0218.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.664] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0218.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.664] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0218.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.666] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.666] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.672] CloseHandle (hObject=0x1ec) returned 1 [0218.672] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.672] SetEndOfFile (hFile=0x1dc) returned 1 [0218.672] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.026.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.026.etl.vhd")) returned 1 [0218.673] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UP7B54~1.ETL")) returned 1 [0218.673] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.027.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0218.692] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0218.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6638 [0218.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6638 | out: hHeap=0x2830000) returned 1 [0218.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.693] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0218.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.694] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0218.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.699] CloseHandle (hObject=0x1ec) returned 1 [0218.699] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.699] SetEndOfFile (hFile=0x1dc) returned 1 [0218.700] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.027.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.027.etl.vhd")) returned 1 [0218.713] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPC098~1.ETL")) returned 1 [0218.713] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.028.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0218.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0218.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0218.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0218.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.727] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0218.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.727] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.727] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0218.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.728] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.732] CloseHandle (hObject=0x1ec) returned 1 [0218.732] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.732] SetEndOfFile (hFile=0x1dc) returned 1 [0218.733] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.028.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.028.etl.vhd")) returned 1 [0218.734] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.029.etl", cAlternateFileName="UP16CC~1.ETL")) returned 1 [0218.734] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.029.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0218.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0218.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0218.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0218.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.747] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0218.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.761] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0218.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.765] CloseHandle (hObject=0x1ec) returned 1 [0218.765] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.765] SetEndOfFile (hFile=0x1dc) returned 1 [0218.765] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.029.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.029.etl.vhd")) returned 1 [0218.766] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.030.etl", cAlternateFileName="UPDA92~1.ETL")) returned 1 [0218.766] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.030.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7918 [0218.778] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7918 | out: hHeap=0x2830000) returned 1 [0218.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6598 [0218.778] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.778] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.778] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6598 | out: hHeap=0x2830000) returned 1 [0218.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.779] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.780] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6990 [0218.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.780] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6990 | out: hHeap=0x2830000) returned 1 [0218.781] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.781] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.784] CloseHandle (hObject=0x1ec) returned 1 [0218.784] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.784] SetEndOfFile (hFile=0x1dc) returned 1 [0218.784] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.030.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.030.etl.vhd")) returned 1 [0218.785] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.031.etl", cAlternateFileName="UPBF2A~1.ETL")) returned 1 [0218.785] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.031.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0218.799] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0218.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0218.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0218.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.800] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0218.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.802] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0218.802] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.802] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.802] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.802] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.817] CloseHandle (hObject=0x1ec) returned 1 [0218.818] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.818] SetEndOfFile (hFile=0x1dc) returned 1 [0218.830] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.031.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.031.etl.vhd")) returned 1 [0218.831] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.032.etl", cAlternateFileName="UP750B~1.ETL")) returned 1 [0218.831] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.032.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0218.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6608 [0218.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6608 | out: hHeap=0x2830000) returned 1 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0218.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.862] CloseHandle (hObject=0x1ec) returned 1 [0218.862] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.862] SetEndOfFile (hFile=0x1dc) returned 1 [0218.879] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.032.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.032.etl.vhd")) returned 1 [0218.880] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.033.etl", cAlternateFileName="UP6487~1.ETL")) returned 1 [0218.881] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.033.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0218.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0218.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0218.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0218.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0218.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0218.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0218.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.897] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0218.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0218.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0218.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0218.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0218.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0218.898] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0218.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0218.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0218.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0218.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0218.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0218.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0218.922] CloseHandle (hObject=0x1ec) returned 1 [0218.922] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.922] SetEndOfFile (hFile=0x1dc) returned 1 [0218.975] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.033.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.033.etl.vhd")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.034.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0218.976] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.034.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0218.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0218.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0218.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0219.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0219.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.007] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0219.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0219.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0219.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0219.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0219.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.022] CloseHandle (hObject=0x1ec) returned 1 [0219.022] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.022] SetEndOfFile (hFile=0x1dc) returned 1 [0219.022] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.034.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.034.etl.vhd")) returned 1 [0219.023] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.035.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0219.023] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.035.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0219.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0219.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0219.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0219.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6688 [0219.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6688 | out: hHeap=0x2830000) returned 1 [0219.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0219.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.039] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0219.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.039] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0219.041] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.041] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0219.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0219.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.051] CloseHandle (hObject=0x1ec) returned 1 [0219.051] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.051] SetEndOfFile (hFile=0x1dc) returned 1 [0219.051] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.035.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.035.etl.vhd")) returned 1 [0219.052] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.036.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0219.052] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.036.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0219.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6508 [0219.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6508 | out: hHeap=0x2830000) returned 1 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.065] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0219.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0219.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0219.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0219.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.069] CloseHandle (hObject=0x1ec) returned 1 [0219.069] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.069] SetEndOfFile (hFile=0x1dc) returned 1 [0219.069] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.036.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.036.etl.vhd")) returned 1 [0219.070] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.037.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0219.070] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.037.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.082] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0219.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0219.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.083] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0219.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0219.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0219.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0219.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.100] CloseHandle (hObject=0x1ec) returned 1 [0219.100] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.100] SetEndOfFile (hFile=0x1dc) returned 1 [0219.116] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.037.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.037.etl.vhd")) returned 1 [0219.117] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0219.117] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0219.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0219.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0219.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0219.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.128] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65f8 [0219.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.128] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65f8 | out: hHeap=0x2830000) returned 1 [0219.129] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.129] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.129] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0219.129] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.129] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0219.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.129] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0219.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0219.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0219.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.133] CloseHandle (hObject=0x1ec) returned 1 [0219.133] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.133] SetEndOfFile (hFile=0x1dc) returned 1 [0219.133] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl.vhd")) returned 1 [0219.134] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0219.134] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7030 [0219.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde71a8 [0219.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0219.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0219.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde6658 [0219.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6658 | out: hHeap=0x2830000) returned 1 [0219.147] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.147] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.148] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0219.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde71a8 [0219.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.148] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0219.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde71a8 [0219.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde71a8 | out: hHeap=0x2830000) returned 1 [0219.149] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7030 | out: hHeap=0x2830000) returned 1 [0219.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1000, lpOverlapped=0x0) returned 1 [0219.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1000, lpOverlapped=0x0) returned 1 [0219.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.157] CloseHandle (hObject=0x1ec) returned 1 [0219.157] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.157] SetEndOfFile (hFile=0x1dc) returned 1 [0219.175] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.002.etl.vhd")) returned 1 [0219.176] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 0 [0219.176] FindClose (in: hFindFile=0xd24458 | out: hFindFile=0xd24458) returned 1 [0219.176] FindFirstFileW (in: lpFileName="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0219.176] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.176] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.176] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0219.176] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0219.177] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.177] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6508 [0219.177] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xde7030 [0219.177] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6558 [0219.177] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6c) returned 0xde70a0 [0219.177] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0219.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.194] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xde7118 [0219.194] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xde9b28 [0219.194] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7a78 [0219.194] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7a78 | out: hHeap=0x2830000) returned 1 [0219.194] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9c90 [0219.194] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde65c8 [0219.194] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.194] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9c90 | out: hHeap=0x2830000) returned 1 [0219.194] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde65c8 | out: hHeap=0x2830000) returned 1 [0219.194] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.194] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.195] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.195] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0219.195] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xde9b28 [0219.195] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xde9d38 [0219.195] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.195] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9d38 | out: hHeap=0x2830000) returned 1 [0219.196] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0219.196] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xde9b28 [0219.196] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9b28 | out: hHeap=0x2830000) returned 1 [0219.196] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7118 | out: hHeap=0x2830000) returned 1 [0219.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf9, lpOverlapped=0x0) returned 1 [0219.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff07, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x100, lpOverlapped=0x0) returned 1 [0219.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.203] CloseHandle (hObject=0x1ec) returned 1 [0219.204] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.204] SetEndOfFile (hFile=0x1dc) returned 1 [0219.204] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.vhd" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm.vhd")) returned 1 [0219.205] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0219.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6598 [0219.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xde7118 [0219.205] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0219.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6658 [0219.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xde7190 [0219.205] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0 [0219.205] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0219.205] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24458 [0219.213] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.213] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbba47a90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0219.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde65d8 [0219.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde30d0 [0219.213] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0219.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.232] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba48bb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0219.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde65f8 [0219.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xde7210 [0219.232] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0219.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6668 [0219.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xde7280 [0219.232] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0219.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde65c8 [0219.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xde9b28 [0219.232] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb5200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0219.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.233] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0219.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.233] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0219.233] FindClose (in: hFindFile=0xd24458 | out: hFindFile=0xd24458) returned 1 [0219.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0219.234] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.234] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0219.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.260] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0219.260] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0219.260] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DAO", cAlternateFileName="")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6608 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x72) returned 0xde9b98 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ink", cAlternateFileName="")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6688 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x72) returned 0xde9c18 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSEnv", cAlternateFileName="")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6698 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xde9c98 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6618 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x78) returned 0xde9d18 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6628 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x80) returned 0xde9d98 [0219.298] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6638 [0219.298] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7c) returned 0xde9e20 [0219.299] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde6528 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7a) returned 0xde9ea8 [0219.299] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea050 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdea338 [0219.299] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea0a0 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x72) returned 0xdea3b0 [0219.299] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9fe0 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xdea430 [0219.299] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea000 [0219.299] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xdea4b0 [0219.300] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0219.300] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0219.300] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0219.301] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.301] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea0c0 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0xdea530 [0219.301] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0219.301] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0219.301] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0219.301] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.301] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea0e0 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdea5a8 [0219.301] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea090 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde3068 [0219.301] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea010 [0219.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdea618 [0219.301] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0219.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea060 [0219.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xdea720 [0219.302] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 0 [0219.302] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0219.302] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24558 [0219.303] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.303] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1 [0219.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea0b0 [0219.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde33a8 [0219.303] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Download", cAlternateFileName="")) returned 1 [0219.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea0d0 [0219.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde2df8 [0219.303] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0219.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0219.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0219.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0219.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0219.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0219.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea0f0 [0219.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0219.368] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea0f0 | out: hHeap=0x2830000) returned 1 [0219.368] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0219.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.369] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0219.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0219.369] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0219.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.369] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0219.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0219.370] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0219.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.370] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0219.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0219.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0219.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1650, lpOverlapped=0x0) returned 1 [0219.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe9b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1650, lpOverlapped=0x0) returned 1 [0219.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.410] CloseHandle (hObject=0x1ec) returned 1 [0219.411] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.411] SetEndOfFile (hFile=0x1dc) returned 1 [0219.411] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe.vhd" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe.vhd")) returned 1 [0219.412] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1 [0219.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9f70 [0219.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde3478 [0219.412] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 0 [0219.412] FindClose (in: hFindFile=0xd24558 | out: hFindFile=0xd24558) returned 1 [0219.412] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0219.412] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.412] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.412] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0219.412] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24518 [0219.413] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.413] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0219.413] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea0f0 [0219.413] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xdead40 [0219.413] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0219.413] FindClose (in: hFindFile=0xd24518 | out: hFindFile=0xd24518) returned 1 [0219.413] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0219.413] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.413] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0219.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0219.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0219.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0219.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0219.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0219.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0219.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0219.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde9ff0 [0219.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0219.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9ff0 | out: hHeap=0x2830000) returned 1 [0219.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0219.434] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.434] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0219.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0219.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0219.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0219.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0219.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0219.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0219.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0219.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0219.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c4, lpOverlapped=0x0) returned 1 [0219.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d0, lpOverlapped=0x0) returned 1 [0219.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0219.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0219.437] CloseHandle (hObject=0x1ec) returned 1 [0219.437] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.437] SetEndOfFile (hFile=0x1dc) returned 1 [0219.438] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), lpNewFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins.vhd" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins.vhd")) returned 1 [0219.460] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0219.460] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0219.461] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\images\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24098 [0219.461] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.461] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.461] FindClose (in: hFindFile=0xd24098 | out: hFindFile=0xd24098) returned 1 [0219.461] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0219.461] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.461] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408b2676, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x69769e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0219.461] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0219.523] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e61df, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f3c6579, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0219.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.639] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0220.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.648] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0220.648] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0220.648] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0220.648] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.648] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb855b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9beb855b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9beb855b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1 [0220.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.655] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1 [0220.655] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0220.655] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0 [0220.656] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0220.656] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0220.736] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.736] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0220.736] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0220.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0220.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0220.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea080 [0220.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0220.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0220.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea080 | out: hHeap=0x2830000) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0220.754] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0220.754] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0220.754] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0220.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0220.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0220.858] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0220.858] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0220.858] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0220.858] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0220.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0220.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0220.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1040, lpOverlapped=0x0) returned 1 [0220.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffefc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1040, lpOverlapped=0x0) returned 1 [0220.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0220.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0220.913] CloseHandle (hObject=0x1ec) returned 1 [0220.913] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.913] SetEndOfFile (hFile=0x1dc) returned 1 [0220.914] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll.vhd")) returned 1 [0220.922] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a238f8c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7a4aa8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0220.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0220.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0220.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0220.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0220.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0220.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0221.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0221.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0221.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde9fa0 [0221.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0221.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9fa0 | out: hHeap=0x2830000) returned 1 [0221.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.000] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0221.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0221.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0221.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0221.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0221.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0221.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0221.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.824] CloseHandle (hObject=0x1ec) returned 1 [0221.824] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.824] SetEndOfFile (hFile=0x1dc) returned 1 [0221.834] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll.vhd")) returned 1 [0221.835] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a2ab773, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0221.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0221.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.850] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0221.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea130 [0221.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0221.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea130 | out: hHeap=0x2830000) returned 1 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.851] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0221.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0221.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0221.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0221.853] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0221.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1440, lpOverlapped=0x0) returned 1 [0221.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1440, lpOverlapped=0x0) returned 1 [0221.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0221.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0221.866] CloseHandle (hObject=0x1ec) returned 1 [0221.866] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.866] SetEndOfFile (hFile=0x1dc) returned 1 [0221.866] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll.vhd")) returned 1 [0221.867] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0221.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0221.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0221.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.883] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0221.883] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0221.883] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0221.883] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0221.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0221.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea040 [0221.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0221.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea040 | out: hHeap=0x2830000) returned 1 [0221.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.884] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0221.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0221.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0221.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0221.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.885] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0221.886] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0221.886] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.886] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.886] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0221.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1040, lpOverlapped=0x0) returned 1 [0221.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffefc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1040, lpOverlapped=0x0) returned 1 [0221.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0221.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0221.889] CloseHandle (hObject=0x1ec) returned 1 [0221.889] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.890] SetEndOfFile (hFile=0x1dc) returned 1 [0221.890] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll.vhd")) returned 1 [0221.891] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0221.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0221.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0221.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xde9f60 [0221.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0221.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde9f60 | out: hHeap=0x2830000) returned 1 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.909] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0221.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0221.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0221.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0221.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0221.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0221.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0221.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0221.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0221.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x40, lpOverlapped=0x0) returned 1 [0221.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x40, lpOverlapped=0x0) returned 1 [0221.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0221.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0221.982] CloseHandle (hObject=0x1ec) returned 1 [0221.982] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.982] SetEndOfFile (hFile=0x1dc) returned 1 [0221.983] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll.vhd")) returned 1 [0221.984] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0221.984] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0221.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0221.984] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.984] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0221.984] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0221.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0221.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.017] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeae90 [0222.017] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb008 [0222.017] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0222.017] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0222.017] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb170 [0222.017] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea040 [0222.017] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0222.017] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb170 | out: hHeap=0x2830000) returned 1 [0222.017] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea040 | out: hHeap=0x2830000) returned 1 [0222.017] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0222.017] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0222.018] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0222.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb008 [0222.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb218 [0222.018] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0222.018] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb218 | out: hHeap=0x2830000) returned 1 [0222.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0222.019] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb008 [0222.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb008 | out: hHeap=0x2830000) returned 1 [0222.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeae90 | out: hHeap=0x2830000) returned 1 [0222.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa4, lpOverlapped=0x0) returned 1 [0222.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb0, lpOverlapped=0x0) returned 1 [0222.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.022] CloseHandle (hObject=0x1ec) returned 1 [0222.022] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.022] SetEndOfFile (hFile=0x1dc) returned 1 [0222.022] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log.vhd")) returned 1 [0222.023] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0222.023] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0222.023] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24558 [0222.024] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.024] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0222.024] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea100 [0222.024] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8a) returned 0xdeae90 [0222.024] FindNextFileW (in: hFindFile=0xd24558, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0222.024] FindClose (in: hFindFile=0xd24558 | out: hFindFile=0xd24558) returned 1 [0222.042] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24518 [0222.042] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.043] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0222.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea070 [0222.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x80) returned 0xdeaf28 [0222.043] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0222.043] FindClose (in: hFindFile=0xd24518 | out: hFindFile=0xd24518) returned 1 [0222.043] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\Offline\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0222.043] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.043] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.043] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0222.043] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0222.044] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.044] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0222.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\EppManifest.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\eppmanifest.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.045] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0222.045] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.046] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0222.046] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.047] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0222.047] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0222.047] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0222.048] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.048] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0222.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.049] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0222.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.049] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0222.049] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0222.049] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd247d8 [0222.051] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.051] FindNextFileW (in: hFindFile=0xd247d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.051] FindClose (in: hFindFile=0xd247d8 | out: hFindFile=0xd247d8) returned 1 [0222.051] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0222.051] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.051] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0222.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.073] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0222.073] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0222.073] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0222.073] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.073] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.074] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0222.074] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0222.076] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.076] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0222.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.077] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0222.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.078] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0222.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.080] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0222.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.081] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0222.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.082] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0222.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.082] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0222.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.084] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0222.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.085] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0222.085] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0222.086] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0222.086] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.086] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.086] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0222.086] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24358 [0222.089] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.089] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b1b89b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0222.089] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.090] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0222.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.092] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0222.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.093] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0222.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.094] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0222.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.095] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0222.095] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.097] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0222.097] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.097] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0222.097] FindClose (in: hFindFile=0xd24358 | out: hFindFile=0xd24358) returned 1 [0222.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0222.102] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.102] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0222.102] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea110 [0222.102] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x72) returned 0xdeafb0 [0222.102] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x97a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0222.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.108] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0222.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.109] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0222.109] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.110] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775f2f48, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775f2f48, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775f2f48, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0222.110] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.111] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1 [0222.111] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.111] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0222.111] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.112] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0222.112] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0222.113] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0222.113] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.113] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0222.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea040 [0222.113] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x68) returned 0xdeacd0 [0222.114] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480bd806, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xdc94812c, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x480bd806, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x417c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0222.114] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.115] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0222.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.116] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0222.116] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0222.116] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24158 [0222.116] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.116] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4094d875, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0222.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.119] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0222.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.123] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0222.124] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.127] FindNextFileW (in: hFindFile=0xd24158, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0222.127] FindClose (in: hFindFile=0xd24158 | out: hFindFile=0xd24158) returned 1 [0222.127] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0222.130] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.130] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea030 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb6) returned 0xde9a48 [0222.130] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea020 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x86) returned 0xdeb030 [0222.130] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9f60 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdeb0c0 [0222.130] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea080 [0222.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7e) returned 0xdeb138 [0222.130] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 0 [0222.131] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0222.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0222.132] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.132] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0222.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea120 [0222.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x52) returned 0xde1ca0 [0222.132] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0222.132] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.132] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0222.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea130 [0222.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde1760 [0222.133] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0222.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9f90 [0222.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde1d60 [0222.133] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0222.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea140 [0222.133] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x58) returned 0xde16a0 [0222.133] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0222.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.133] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0222.133] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.145] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0222.146] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0222.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0222.147] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.147] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0222.147] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.147] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0222.147] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0222.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24398 [0222.147] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9ff0 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xdeb1c0 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9f80 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xdea870 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea150 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6c) returned 0xdeb240 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9fd0 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdeb2b8 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9fa0 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xa0) returned 0xde3e68 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9fb0 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7a) returned 0xdeb330 [0222.148] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xde9fc0 [0222.148] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xdeb3b8 [0222.149] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0222.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea160 [0222.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdeb438 [0222.149] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0222.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea1b0 [0222.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6e) returned 0xdeb4b0 [0222.149] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0222.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea1d0 [0222.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdeabf0 [0222.172] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0222.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea1c0 [0222.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xdeac60 [0222.173] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0222.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea310 [0222.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x68) returned 0xdea950 [0222.173] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0222.173] FindClose (in: hFindFile=0xd24398 | out: hFindFile=0xd24398) returned 1 [0222.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0222.174] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.174] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0222.174] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.189] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0222.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0222.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.190] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.190] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.190] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.191] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.192] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0222.192] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.192] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.192] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e70, lpOverlapped=0x0) returned 1 [0222.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe190, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e70, lpOverlapped=0x0) returned 1 [0222.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.195] CloseHandle (hObject=0x1ec) returned 1 [0222.195] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.196] SetEndOfFile (hFile=0x1dc) returned 1 [0222.196] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), lpNewFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.vhd" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.vhd")) returned 1 [0222.197] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0222.197] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0222.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24198 [0222.198] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.198] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0222.198] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0222.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0222.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea250 [0222.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea250 | out: hHeap=0x2830000) returned 1 [0222.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.225] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0222.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.225] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.226] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0222.226] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.226] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.226] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c4, lpOverlapped=0x0) returned 1 [0222.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d0, lpOverlapped=0x0) returned 1 [0222.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.228] CloseHandle (hObject=0x1ec) returned 1 [0222.228] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.228] SetEndOfFile (hFile=0x1dc) returned 1 [0222.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), lpNewFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.vhd" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.vhd")) returned 1 [0222.325] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0222.325] FindClose (in: hFindFile=0xd24198 | out: hFindFile=0xd24198) returned 1 [0222.325] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0222.325] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.325] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0222.325] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.327] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0222.327] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0222.327] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24618 [0222.327] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.328] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0222.328] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.328] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0222.328] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.328] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0222.328] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0222.328] FindNextFileW (in: hFindFile=0xd24618, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0222.328] FindClose (in: hFindFile=0xd24618 | out: hFindFile=0xd24618) returned 1 [0222.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0222.329] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.329] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0222.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea200 [0222.329] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0xde7a78 [0222.329] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0222.329] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0222.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0222.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea250 [0222.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea250 | out: hHeap=0x2830000) returned 1 [0222.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.345] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0222.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0222.346] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.346] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.347] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcac, lpOverlapped=0x0) returned 1 [0222.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff354, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcb0, lpOverlapped=0x0) returned 1 [0222.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.347] CloseHandle (hObject=0x1ec) returned 1 [0222.348] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.348] SetEndOfFile (hFile=0x1dc) returned 1 [0222.348] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.vhd")) returned 1 [0222.349] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0222.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea170 [0222.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x4e) returned 0xde7918 [0222.349] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0222.350] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.411] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.411] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0222.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea290 [0222.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea290 | out: hHeap=0x2830000) returned 1 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.412] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.413] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.414] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0222.414] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.414] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.414] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x28, lpOverlapped=0x0) returned 1 [0222.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x30, lpOverlapped=0x0) returned 1 [0222.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.416] CloseHandle (hObject=0x1ec) returned 1 [0222.417] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.417] SetEndOfFile (hFile=0x1dc) returned 1 [0222.488] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.vhd")) returned 1 [0222.489] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0222.489] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.492] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.493] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.494] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.495] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.496] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.497] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.498] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0222.503] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0222.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea280 [0222.503] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.503] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.503] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea280 | out: hHeap=0x2830000) returned 1 [0222.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.503] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.504] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0222.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.504] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0222.505] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.505] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2e, lpOverlapped=0x0) returned 1 [0222.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x30, lpOverlapped=0x0) returned 1 [0222.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.562] CloseHandle (hObject=0x1ec) returned 1 [0222.562] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.562] SetEndOfFile (hFile=0x1dc) returned 1 [0222.658] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.vhd")) returned 1 [0222.659] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0222.659] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0222.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea260 [0222.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea260 | out: hHeap=0x2830000) returned 1 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.678] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.678] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.678] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.679] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0222.680] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.680] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x210, lpOverlapped=0x0) returned 1 [0222.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffdf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x210, lpOverlapped=0x0) returned 1 [0222.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.682] CloseHandle (hObject=0x1ec) returned 1 [0222.682] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.683] SetEndOfFile (hFile=0x1dc) returned 1 [0222.683] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.vhd")) returned 1 [0222.684] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0222.684] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0222.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea180 [0222.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0222.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea180 | out: hHeap=0x2830000) returned 1 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.833] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0222.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0222.834] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0222.834] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0222.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0222.835] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0222.835] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0222.835] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0222.835] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0222.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0222.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0222.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19bd, lpOverlapped=0x0) returned 1 [0222.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe643, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19c0, lpOverlapped=0x0) returned 1 [0222.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0222.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0222.996] CloseHandle (hObject=0x1ec) returned 1 [0222.997] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.997] SetEndOfFile (hFile=0x1dc) returned 1 [0222.997] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.vhd")) returned 1 [0222.998] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0222.998] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0222.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0223.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1e0 [0223.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0223.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1e0 | out: hHeap=0x2830000) returned 1 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0223.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.015] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0223.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0223.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0223.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0223.016] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0223.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.016] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0223.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x171c, lpOverlapped=0x0) returned 1 [0223.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1720, lpOverlapped=0x0) returned 1 [0223.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0223.245] CloseHandle (hObject=0x1ec) returned 1 [0223.245] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.245] SetEndOfFile (hFile=0x1dc) returned 1 [0223.421] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.vhd")) returned 1 [0223.422] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0223.422] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdeb528 [0223.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdeb6a0 [0223.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0223.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0223.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb808 [0223.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea300 [0223.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb808 | out: hHeap=0x2830000) returned 1 [0223.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea300 | out: hHeap=0x2830000) returned 1 [0223.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0223.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.436] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0223.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0223.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdeb6a0 [0223.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdeb8b0 [0223.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb8b0 | out: hHeap=0x2830000) returned 1 [0223.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0223.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdeb6a0 [0223.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb6a0 | out: hHeap=0x2830000) returned 1 [0223.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdeb528 | out: hHeap=0x2830000) returned 1 [0223.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x3bb, lpOverlapped=0x0) returned 1 [0223.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc45, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x3c0, lpOverlapped=0x0) returned 1 [0223.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0223.439] CloseHandle (hObject=0x1ec) returned 1 [0223.439] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.440] SetEndOfFile (hFile=0x1dc) returned 1 [0223.501] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.vhd")) returned 1 [0223.502] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0223.502] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0223.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0223.502] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.502] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea1f0 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde2ec8 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea280 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde2f30 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea210 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xdeb528 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea2a0 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xdeadb0 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea260 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde1dc0 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea180 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xdeae20 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea220 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdeaaa0 [0223.503] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0223.503] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea270 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xde1700 [0223.504] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea230 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5a) returned 0xde3208 [0223.504] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea1e0 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x60) returned 0xde3138 [0223.504] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea2d0 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x58) returned 0xde17c0 [0223.504] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea2f0 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdea6b0 [0223.504] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea2b0 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xdeaa30 [0223.504] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea290 [0223.504] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x56) returned 0xdebc98 [0223.505] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0223.505] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0223.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0223.509] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.511] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0223.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.522] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.523] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.576] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0223.576] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0223.576] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0223.576] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0223.576] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0223.576] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0223.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0223.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0223.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0223.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.577] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0223.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0223.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0223.577] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0223.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.577] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0223.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0223.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0223.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0223.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x91c, lpOverlapped=0x0) returned 1 [0223.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x920, lpOverlapped=0x0) returned 1 [0223.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0223.607] CloseHandle (hObject=0x1ec) returned 1 [0223.607] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.607] SetEndOfFile (hFile=0x1dc) returned 1 [0223.607] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0223.608] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0223.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0223.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0223.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0223.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0223.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0223.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0223.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0223.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0223.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0223.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.673] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0223.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0223.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0223.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0223.674] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.674] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0223.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0223.675] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0223.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.675] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0223.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5fd, lpOverlapped=0x0) returned 1 [0223.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x600, lpOverlapped=0x0) returned 1 [0223.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0223.676] CloseHandle (hObject=0x1ec) returned 1 [0223.676] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.676] SetEndOfFile (hFile=0x1dc) returned 1 [0223.838] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0223.839] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0223.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0223.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0223.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0223.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0223.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0223.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0223.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0223.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0223.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0223.851] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0223.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0223.852] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.852] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0223.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0223.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0223.852] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0223.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.853] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0223.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0223.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0223.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0223.854] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0223.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0223.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0223.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1863, lpOverlapped=0x0) returned 1 [0224.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe79d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1870, lpOverlapped=0x0) returned 1 [0224.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.022] CloseHandle (hObject=0x1ec) returned 1 [0224.023] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.023] SetEndOfFile (hFile=0x1dc) returned 1 [0224.159] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.160] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0224.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0224.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0224.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.172] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0224.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0224.174] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.174] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0224.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0224.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.175] CloseHandle (hObject=0x1ec) returned 1 [0224.175] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.175] SetEndOfFile (hFile=0x1dc) returned 1 [0224.175] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.176] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0224.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0224.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0224.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0224.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0224.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.246] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0224.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0224.247] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.247] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.329] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1381, lpOverlapped=0x0) returned 1 [0224.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1390, lpOverlapped=0x0) returned 1 [0224.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.332] CloseHandle (hObject=0x1ec) returned 1 [0224.332] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.332] SetEndOfFile (hFile=0x1dc) returned 1 [0224.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.417] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0224.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0224.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0224.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0224.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0224.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.430] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.431] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0224.431] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.431] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.431] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.431] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0224.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0224.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0224.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.433] CloseHandle (hObject=0x1ec) returned 1 [0224.434] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.434] SetEndOfFile (hFile=0x1dc) returned 1 [0224.434] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.435] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0224.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.511] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.511] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.511] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0224.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea300 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea300 | out: hHeap=0x2830000) returned 1 [0224.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.512] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0224.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.512] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.512] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0224.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.513] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1f10, lpOverlapped=0x0) returned 1 [0224.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe0f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1f10, lpOverlapped=0x0) returned 1 [0224.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.534] CloseHandle (hObject=0x1ec) returned 1 [0224.534] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.535] SetEndOfFile (hFile=0x1dc) returned 1 [0224.535] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.536] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0224.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0224.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0224.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.551] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.551] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.551] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.552] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.552] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0224.553] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.553] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0224.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0224.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.554] CloseHandle (hObject=0x1ec) returned 1 [0224.554] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.554] SetEndOfFile (hFile=0x1dc) returned 1 [0224.554] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.555] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0224.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0224.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0224.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0224.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0224.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.630] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0224.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.630] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0224.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0224.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0224.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa4e, lpOverlapped=0x0) returned 1 [0224.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa50, lpOverlapped=0x0) returned 1 [0224.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0224.860] CloseHandle (hObject=0x1ec) returned 1 [0224.861] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.861] SetEndOfFile (hFile=0x1dc) returned 1 [0224.975] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0224.976] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0224.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0224.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0224.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0224.990] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0224.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0224.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0224.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.991] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0224.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0224.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.992] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0224.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0224.998] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0224.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0224.998] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0224.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbfb, lpOverlapped=0x0) returned 1 [0225.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff405, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc00, lpOverlapped=0x0) returned 1 [0225.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0225.017] CloseHandle (hObject=0x1ec) returned 1 [0225.017] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.017] SetEndOfFile (hFile=0x1dc) returned 1 [0225.027] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0225.028] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0225.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0225.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0225.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0225.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0225.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.095] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0225.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0225.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0225.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0225.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0225.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0225.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0225.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0225.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5e3, lpOverlapped=0x0) returned 1 [0225.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa1d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5f0, lpOverlapped=0x0) returned 1 [0225.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0225.206] CloseHandle (hObject=0x1ec) returned 1 [0225.206] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.206] SetEndOfFile (hFile=0x1dc) returned 1 [0225.293] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0225.294] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0225.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0225.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0225.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0225.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0225.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0225.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0225.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0225.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0225.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0225.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.310] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0225.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0225.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0225.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0225.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.310] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0225.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0225.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0225.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0225.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0225.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0225.312] CloseHandle (hObject=0x1ec) returned 1 [0225.312] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.312] SetEndOfFile (hFile=0x1dc) returned 1 [0225.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0225.313] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0225.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0225.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0225.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.324] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0225.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0225.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0225.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0225.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0225.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0225.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0225.326] CloseHandle (hObject=0x1ec) returned 1 [0225.326] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.326] SetEndOfFile (hFile=0x1dc) returned 1 [0225.326] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0225.327] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0225.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0225.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0225.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0225.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0225.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0225.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0225.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0225.429] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0225.429] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0225.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0225.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.430] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0225.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0225.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0225.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0225.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0225.431] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0225.431] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0225.431] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0225.431] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0225.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x863, lpOverlapped=0x0) returned 1 [0225.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff79d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x870, lpOverlapped=0x0) returned 1 [0225.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0225.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0225.432] CloseHandle (hObject=0x1ec) returned 1 [0225.448] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.449] SetEndOfFile (hFile=0x1dc) returned 1 [0225.632] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.vhd")) returned 1 [0225.633] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0225.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0225.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0226.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0226.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0226.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0226.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0226.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.119] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0226.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0226.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0226.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0226.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0226.120] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0226.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0226.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x863, lpOverlapped=0x0) returned 1 [0226.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff79d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x870, lpOverlapped=0x0) returned 1 [0226.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0226.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0226.121] CloseHandle (hObject=0x1ec) returned 1 [0226.121] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.121] SetEndOfFile (hFile=0x1dc) returned 1 [0226.122] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.vhd")) returned 1 [0226.123] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0226.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0226.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0226.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0226.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0226.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0226.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0226.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0226.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0226.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0226.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0226.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0226.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0226.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.151] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0226.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0226.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0226.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0226.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0226.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0226.152] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0226.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0226.152] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0226.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0226.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0226.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb4b, lpOverlapped=0x0) returned 1 [0226.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4b5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb50, lpOverlapped=0x0) returned 1 [0226.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0226.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0226.204] CloseHandle (hObject=0x1ec) returned 1 [0226.204] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.204] SetEndOfFile (hFile=0x1dc) returned 1 [0226.296] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0226.297] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0226.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0226.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0227.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0227.893] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0227.893] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0227.893] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0227.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0227.893] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0227.893] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0227.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0227.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0227.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0227.893] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0227.893] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0227.894] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0227.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0227.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0227.894] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0227.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0227.894] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0227.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0227.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0227.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0227.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0227.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0227.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0227.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0227.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0227.896] CloseHandle (hObject=0x1ec) returned 1 [0227.896] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.896] SetEndOfFile (hFile=0x1dc) returned 1 [0227.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0227.898] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0227.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0227.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0229.013] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0229.013] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.013] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0229.013] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.013] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.013] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0229.013] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0229.014] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0229.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.014] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0229.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0229.015] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.015] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0229.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0229.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0229.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0229.074] CloseHandle (hObject=0x1ec) returned 1 [0229.074] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.074] SetEndOfFile (hFile=0x1dc) returned 1 [0229.074] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0229.075] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0229.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0229.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.312] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0229.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0229.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0229.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0229.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1d21, lpOverlapped=0x0) returned 1 [0229.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe2df, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d30, lpOverlapped=0x0) returned 1 [0229.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0229.432] CloseHandle (hObject=0x1ec) returned 1 [0229.432] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.432] SetEndOfFile (hFile=0x1dc) returned 1 [0229.510] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0229.512] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0229.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0229.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.881] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0229.881] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0229.881] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0229.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0229.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0229.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.882] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0229.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0229.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0229.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0229.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0229.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0229.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0229.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0229.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a41, lpOverlapped=0x0) returned 1 [0229.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe5bf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a50, lpOverlapped=0x0) returned 1 [0229.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0229.889] CloseHandle (hObject=0x1ec) returned 1 [0229.889] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.889] SetEndOfFile (hFile=0x1dc) returned 1 [0229.889] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0229.890] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0229.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0229.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0229.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0229.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0229.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0229.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0229.947] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0229.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0229.947] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0229.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0229.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0229.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.948] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0229.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0229.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0229.948] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0229.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.948] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0229.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0229.961] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0229.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0229.961] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0229.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x13e5, lpOverlapped=0x0) returned 1 [0230.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x13f0, lpOverlapped=0x0) returned 1 [0230.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.058] CloseHandle (hObject=0x1ec) returned 1 [0230.058] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.058] SetEndOfFile (hFile=0x1dc) returned 1 [0230.076] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.077] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0230.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0230.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0230.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0230.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0230.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.099] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.099] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0230.099] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.099] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0230.100] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0230.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0230.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.101] CloseHandle (hObject=0x1ec) returned 1 [0230.102] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.102] SetEndOfFile (hFile=0x1dc) returned 1 [0230.185] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.186] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0230.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.203] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0230.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0230.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.204] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0230.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1dea, lpOverlapped=0x0) returned 1 [0230.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe216, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1df0, lpOverlapped=0x0) returned 1 [0230.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.234] CloseHandle (hObject=0x1ec) returned 1 [0230.234] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.234] SetEndOfFile (hFile=0x1dc) returned 1 [0230.235] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.235] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0230.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0230.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0230.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0230.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0230.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.303] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0230.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0230.304] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0230.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0230.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.305] CloseHandle (hObject=0x1ec) returned 1 [0230.305] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.305] SetEndOfFile (hFile=0x1dc) returned 1 [0230.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.417] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0230.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0230.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0230.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0230.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0230.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.472] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0230.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0230.473] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0230.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0230.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.474] CloseHandle (hObject=0x1ec) returned 1 [0230.474] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.474] SetEndOfFile (hFile=0x1dc) returned 1 [0230.477] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.478] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0230.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0230.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0230.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0230.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0230.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.561] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0230.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0230.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x400, lpOverlapped=0x0) returned 1 [0230.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffc00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x400, lpOverlapped=0x0) returned 1 [0230.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.569] CloseHandle (hObject=0x1ec) returned 1 [0230.569] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.569] SetEndOfFile (hFile=0x1dc) returned 1 [0230.570] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.570] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0230.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.583] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.584] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0230.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0230.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.585] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0230.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0230.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0230.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0230.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.588] CloseHandle (hObject=0x1ec) returned 1 [0230.588] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.588] SetEndOfFile (hFile=0x1dc) returned 1 [0230.588] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.589] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0230.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0230.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0230.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.621] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0230.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.622] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0230.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0230.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0230.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18a8, lpOverlapped=0x0) returned 1 [0230.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe758, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18b0, lpOverlapped=0x0) returned 1 [0230.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.702] CloseHandle (hObject=0x1ec) returned 1 [0230.702] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.703] SetEndOfFile (hFile=0x1dc) returned 1 [0230.919] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.920] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0230.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0230.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0230.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0230.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.949] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0230.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0230.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0230.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0230.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0230.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0230.951] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0230.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0230.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0230.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0230.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0230.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0230.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0230.952] CloseHandle (hObject=0x1ec) returned 1 [0230.952] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.952] SetEndOfFile (hFile=0x1dc) returned 1 [0230.952] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0230.954] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0230.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0230.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0231.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0231.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.035] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.037] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0231.037] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.037] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.037] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5aa, lpOverlapped=0x0) returned 1 [0231.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5b0, lpOverlapped=0x0) returned 1 [0231.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.038] CloseHandle (hObject=0x1ec) returned 1 [0231.038] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.038] SetEndOfFile (hFile=0x1dc) returned 1 [0231.038] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.039] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0231.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.076] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.076] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea300 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea300 | out: hHeap=0x2830000) returned 1 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.077] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.077] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.077] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.078] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0231.078] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.078] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.078] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0231.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0231.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.079] CloseHandle (hObject=0x1ec) returned 1 [0231.079] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.079] SetEndOfFile (hFile=0x1dc) returned 1 [0231.079] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.080] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0231.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0231.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0231.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.093] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.093] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0231.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.094] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0231.094] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xeaa, lpOverlapped=0x0) returned 1 [0231.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff156, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xeb0, lpOverlapped=0x0) returned 1 [0231.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.095] CloseHandle (hObject=0x1ec) returned 1 [0231.095] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.095] SetEndOfFile (hFile=0x1dc) returned 1 [0231.096] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.096] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0231.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.177] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.177] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.178] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0231.179] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.179] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0231.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0231.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.180] CloseHandle (hObject=0x1ec) returned 1 [0231.180] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.180] SetEndOfFile (hFile=0x1dc) returned 1 [0231.181] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.181] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0231.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0231.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0231.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.202] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0231.203] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.203] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.203] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.203] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0231.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0231.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0231.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.205] CloseHandle (hObject=0x1ec) returned 1 [0231.205] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.205] SetEndOfFile (hFile=0x1dc) returned 1 [0231.206] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.207] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0231.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0231.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0231.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0231.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0231.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.263] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0231.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0231.264] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.264] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0231.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0231.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.265] CloseHandle (hObject=0x1ec) returned 1 [0231.265] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.265] SetEndOfFile (hFile=0x1dc) returned 1 [0231.265] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.266] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0231.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.288] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.289] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0231.289] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.289] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.289] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.325] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.325] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0231.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0231.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe56, lpOverlapped=0x0) returned 1 [0231.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe60, lpOverlapped=0x0) returned 1 [0231.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.616] CloseHandle (hObject=0x1ec) returned 1 [0231.616] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.616] SetEndOfFile (hFile=0x1dc) returned 1 [0231.700] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.701] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0231.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0231.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0231.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0231.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0231.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.713] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.713] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0231.713] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.713] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.713] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.713] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.714] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0231.714] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.714] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.714] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4ed, lpOverlapped=0x0) returned 1 [0231.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4f0, lpOverlapped=0x0) returned 1 [0231.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.714] CloseHandle (hObject=0x1ec) returned 1 [0231.715] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.715] SetEndOfFile (hFile=0x1dc) returned 1 [0231.908] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.912] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0231.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.924] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0231.924] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.924] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0231.926] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0231.926] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0231.926] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0231.926] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0231.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd2f, lpOverlapped=0x0) returned 1 [0231.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2d1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd30, lpOverlapped=0x0) returned 1 [0231.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0231.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0231.927] CloseHandle (hObject=0x1ec) returned 1 [0231.927] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.927] SetEndOfFile (hFile=0x1dc) returned 1 [0231.927] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0231.928] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0231.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0231.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0232.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0232.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0232.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0232.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0232.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0232.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0232.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea250 [0232.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0232.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0232.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea250 | out: hHeap=0x2830000) returned 1 [0232.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0232.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0232.035] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0232.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0232.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0232.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0232.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0232.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0232.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0232.036] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0232.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0232.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0232.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0232.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.676] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.676] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.677] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.678] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.678] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.678] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0232.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0232.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0232.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.114] CloseHandle (hObject=0x1ec) returned 1 [0233.114] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.114] SetEndOfFile (hFile=0x1dc) returned 1 [0233.231] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.vhd")) returned 1 [0233.233] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0233.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0233.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0233.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.254] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0233.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.255] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.255] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0233.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x667, lpOverlapped=0x0) returned 1 [0233.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff999, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x670, lpOverlapped=0x0) returned 1 [0233.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0233.295] CloseHandle (hObject=0x1ec) returned 1 [0233.295] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.295] SetEndOfFile (hFile=0x1dc) returned 1 [0233.423] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.vhd")) returned 1 [0233.424] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0233.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0233.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0233.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.437] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0233.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0233.438] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.438] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x175, lpOverlapped=0x0) returned 1 [0233.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe8b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x180, lpOverlapped=0x0) returned 1 [0233.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0233.440] CloseHandle (hObject=0x1ec) returned 1 [0233.440] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.440] SetEndOfFile (hFile=0x1dc) returned 1 [0233.441] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.vhd")) returned 1 [0233.441] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0233.441] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0233.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0233.443] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.443] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0233.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0233.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0233.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.456] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.457] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0233.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9c0, lpOverlapped=0x0) returned 1 [0233.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff640, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x9c0, lpOverlapped=0x0) returned 1 [0233.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0233.541] CloseHandle (hObject=0x1ec) returned 1 [0233.541] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.541] SetEndOfFile (hFile=0x1dc) returned 1 [0233.542] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.vhd" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.vhd")) returned 1 [0233.545] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0233.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.557] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.557] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.557] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0233.557] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0233.557] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.557] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0233.557] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.557] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.557] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0233.557] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.557] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.558] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0233.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.558] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.558] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.558] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0233.559] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.559] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1103, lpOverlapped=0x0) returned 1 [0233.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeefd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1110, lpOverlapped=0x0) returned 1 [0233.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0233.567] CloseHandle (hObject=0x1ec) returned 1 [0233.567] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.567] SetEndOfFile (hFile=0x1dc) returned 1 [0233.567] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.vhd" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.vhd")) returned 1 [0233.568] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0233.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0233.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0233.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0233.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0233.618] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.618] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.619] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0233.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.619] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.619] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0233.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.620] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa40, lpOverlapped=0x0) returned 1 [0233.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa40, lpOverlapped=0x0) returned 1 [0233.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0233.623] CloseHandle (hObject=0x1ec) returned 1 [0233.623] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.623] SetEndOfFile (hFile=0x1dc) returned 1 [0233.623] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.vhd")) returned 1 [0233.624] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0233.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.636] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0233.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0233.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.637] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0233.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.638] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0233.638] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.638] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.638] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xdf0, lpOverlapped=0x0) returned 1 [0233.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff210, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xdf0, lpOverlapped=0x0) returned 1 [0233.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0233.685] CloseHandle (hObject=0x1ec) returned 1 [0233.686] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.686] SetEndOfFile (hFile=0x1dc) returned 1 [0233.842] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.vhd" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.vhd")) returned 1 [0233.842] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0233.842] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0233.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0233.843] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.843] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0233.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\IntegratedOffice.exe" (normalized: "c:\\program files\\microsoft office 15\\clientx64\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0233.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0233.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.880] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.881] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0233.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0233.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0233.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.882] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.882] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0233.882] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0233.883] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0233.883] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.883] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0233.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0233.884] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0233.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0233.884] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0233.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0233.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe80, lpOverlapped=0x0) returned 1 [0234.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff180, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe80, lpOverlapped=0x0) returned 1 [0234.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0234.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0234.061] CloseHandle (hObject=0x1ec) returned 1 [0234.104] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.105] SetEndOfFile (hFile=0x1dc) returned 1 [0234.221] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\IntegratedOffice.exe" (normalized: "c:\\program files\\microsoft office 15\\clientx64\\integratedoffice.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\IntegratedOffice.exe.vhd" (normalized: "c:\\program files\\microsoft office 15\\clientx64\\integratedoffice.exe.vhd")) returned 1 [0234.222] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0234.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\OfficeClickToRun.exe" (normalized: "c:\\program files\\microsoft office 15\\clientx64\\officeclicktorun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0234.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0234.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0234.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0234.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0234.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0234.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0234.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0234.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0234.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0234.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0234.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.242] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0234.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0234.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0234.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0234.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0234.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0234.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0234.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0234.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.536] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.537] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe80, lpOverlapped=0x0) returned 1 [0234.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff180, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe80, lpOverlapped=0x0) returned 1 [0234.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0234.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0234.548] CloseHandle (hObject=0x1ec) returned 1 [0234.548] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.549] SetEndOfFile (hFile=0x1dc) returned 1 [0234.645] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\OfficeClickToRun.exe" (normalized: "c:\\program files\\microsoft office 15\\clientx64\\officeclicktorun.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\OfficeClickToRun.exe.vhd" (normalized: "c:\\program files\\microsoft office 15\\clientx64\\officeclicktorun.exe.vhd")) returned 1 [0234.646] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 0 [0234.646] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0234.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0234.647] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.647] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac873b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecac873b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9d3bb980, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd9c28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0234.647] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0234.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0234.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0234.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0234.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0234.664] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0234.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0234.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0234.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0234.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0234.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0234.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0234.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.665] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0234.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0234.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0234.665] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0234.665] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.666] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0234.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0234.667] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0234.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0234.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0234.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0234.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0234.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c28, lpOverlapped=0x0) returned 1 [0234.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe3d8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1c30, lpOverlapped=0x0) returned 1 [0234.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0234.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0234.927] CloseHandle (hObject=0x1ec) returned 1 [0234.927] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.927] SetEndOfFile (hFile=0x1dc) returned 1 [0235.139] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\helper.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\helper.exe.vhd")) returned 1 [0235.174] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef639ad2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef875ed7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0235.174] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\shortcuts_log.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0235.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0235.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0235.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0235.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7398 [0235.213] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7398 | out: hHeap=0x2830000) returned 1 [0235.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0235.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0235.213] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.213] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0235.213] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0235.213] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0235.213] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.214] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0235.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0235.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0235.214] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0235.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.214] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0235.216] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0235.216] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0235.216] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.216] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0235.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x142, lpOverlapped=0x0) returned 1 [0235.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffebe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x150, lpOverlapped=0x0) returned 1 [0235.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0235.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0235.218] CloseHandle (hObject=0x1ec) returned 1 [0235.218] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.218] SetEndOfFile (hFile=0x1dc) returned 1 [0235.219] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\shortcuts_log.ini" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\shortcuts_log.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\shortcuts_log.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\shortcuts_log.ini.vhd")) returned 1 [0235.220] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0235.220] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\uninstall.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0235.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0235.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0235.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0235.274] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0235.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0235.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0235.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2c0 [0235.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0235.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2c0 | out: hHeap=0x2830000) returned 1 [0235.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0235.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.275] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0235.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0235.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0235.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0235.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0235.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0235.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0235.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0235.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xeea, lpOverlapped=0x0) returned 1 [0235.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff116, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xef0, lpOverlapped=0x0) returned 1 [0235.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0235.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0235.279] CloseHandle (hObject=0x1ec) returned 1 [0235.279] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.279] SetEndOfFile (hFile=0x1dc) returned 1 [0235.279] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\uninstall.log" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\uninstall.log"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\uninstall\\uninstall.log.vhd" (normalized: "c:\\program files\\mozilla firefox\\uninstall\\uninstall.log.vhd")) returned 1 [0235.280] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0235.281] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0235.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0235.281] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.281] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0.1", cAlternateFileName="")) returned 1 [0235.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea2c0 [0235.281] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdeab10 [0235.281] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0.1", cAlternateFileName="")) returned 0 [0235.281] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0235.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\fonts\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0235.282] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.282] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecbad561, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2d273680, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x12b9fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EmojiOneMozilla.ttf", cAlternateFileName="EMOJIO~1.TTF")) returned 1 [0235.282] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\fonts\\EmojiOneMozilla.ttf" (normalized: "c:\\program files\\mozilla firefox\\fonts\\emojionemozilla.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0235.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0235.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0235.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0235.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0235.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0235.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0235.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0235.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea300 [0235.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0235.331] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea300 | out: hHeap=0x2830000) returned 1 [0235.331] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0235.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.332] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0235.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0235.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0235.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0235.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0235.333] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0235.333] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0235.333] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0235.333] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0235.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0235.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0235.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19fc, lpOverlapped=0x0) returned 1 [0236.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe604, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a00, lpOverlapped=0x0) returned 1 [0236.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0236.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0236.311] CloseHandle (hObject=0x1ec) returned 1 [0236.312] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.312] SetEndOfFile (hFile=0x1dc) returned 1 [0236.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\fonts\\EmojiOneMozilla.ttf" (normalized: "c:\\program files\\mozilla firefox\\fonts\\emojionemozilla.ttf"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\fonts\\EmojiOneMozilla.ttf.vhd" (normalized: "c:\\program files\\mozilla firefox\\fonts\\emojionemozilla.ttf.vhd")) returned 1 [0236.313] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecbad561, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2d273680, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x12b9fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EmojiOneMozilla.ttf", cAlternateFileName="EMOJIO~1.TTF")) returned 0 [0236.313] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0236.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0236.314] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.314] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc6c132, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc6c132, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0xc02, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0236.314] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files\\mozilla firefox\\dictionaries\\en-us.aff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0236.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0236.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.374] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.375] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.376] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0236.376] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0236.376] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0236.376] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0236.376] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0236.376] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0236.376] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0236.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0236.377] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0236.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.377] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0236.377] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0236.377] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0236.377] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0236.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.377] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0236.378] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0236.378] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0236.378] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.379] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0236.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc02, lpOverlapped=0x0) returned 1 [0236.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff3fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc10, lpOverlapped=0x0) returned 1 [0236.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0236.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0236.379] CloseHandle (hObject=0x1ec) returned 1 [0236.380] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.380] SetEndOfFile (hFile=0x1dc) returned 1 [0236.380] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\en-US.aff" (normalized: "c:\\program files\\mozilla firefox\\dictionaries\\en-us.aff"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\en-US.aff.vhd" (normalized: "c:\\program files\\mozilla firefox\\dictionaries\\en-us.aff.vhd")) returned 1 [0236.381] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8ccfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0236.381] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files\\mozilla firefox\\dictionaries\\en-us.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0236.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0236.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0236.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0236.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0236.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0236.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0236.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0236.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea190 [0236.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0236.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea190 | out: hHeap=0x2830000) returned 1 [0236.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0236.399] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.400] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0236.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0236.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0236.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0236.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.400] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0236.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0236.401] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0236.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0236.401] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0236.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0236.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0236.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcfb, lpOverlapped=0x0) returned 1 [0236.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff305, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd00, lpOverlapped=0x0) returned 1 [0236.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0236.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0236.586] CloseHandle (hObject=0x1ec) returned 1 [0236.587] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.587] SetEndOfFile (hFile=0x1dc) returned 1 [0236.670] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\en-US.dic" (normalized: "c:\\program files\\mozilla firefox\\dictionaries\\en-us.dic"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\dictionaries\\en-US.dic.vhd" (normalized: "c:\\program files\\mozilla firefox\\dictionaries\\en-us.dic.vhd")) returned 1 [0236.670] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8ccfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0236.670] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0236.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\defaults\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0236.671] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.671] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0236.671] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea250 [0236.671] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde2f98 [0236.671] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0236.671] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0236.671] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24198 [0236.677] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.677] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x200a4780, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x44669, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0236.678] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0236.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0237.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0237.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0237.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0237.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0237.445] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0237.445] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0237.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0237.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0237.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0237.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0237.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0237.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0237.446] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0237.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0237.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0237.446] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0237.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0237.446] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0237.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0237.447] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0237.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0237.447] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0237.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0237.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0237.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0238.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0238.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x669, lpOverlapped=0x0) returned 1 [0238.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff997, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x670, lpOverlapped=0x0) returned 1 [0238.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0238.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0238.768] CloseHandle (hObject=0x1ec) returned 1 [0238.768] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.768] SetEndOfFile (hFile=0x1dc) returned 1 [0238.903] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\blocklist.xml.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\blocklist.xml.vhd")) returned 1 [0238.905] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccde86d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccde86d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0238.905] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd04ada, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecd04ada, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2dbfcd00, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0238.905] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files\\mozilla firefox\\browser\\crashreporter-override.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0238.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0239.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea2e0 [0239.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0239.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea2e0 | out: hHeap=0x2830000) returned 1 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0239.307] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0239.307] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0239.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.308] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0239.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0239.309] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0239.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.309] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0239.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x313, lpOverlapped=0x0) returned 1 [0239.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffced, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x320, lpOverlapped=0x0) returned 1 [0239.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0239.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0239.309] CloseHandle (hObject=0x1ec) returned 1 [0239.310] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.310] SetEndOfFile (hFile=0x1dc) returned 1 [0239.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\crashreporter-override.ini" (normalized: "c:\\program files\\mozilla firefox\\browser\\crashreporter-override.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\crashreporter-override.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\crashreporter-override.ini.vhd")) returned 1 [0239.311] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0239.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea300 [0239.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x68) returned 0xdea9c0 [0239.311] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="features", cAlternateFileName="")) returned 1 [0239.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea320 [0239.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xdea790 [0239.311] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc36bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecdc36bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x20853ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0239.311] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files\\mozilla firefox\\browser\\omni.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0239.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0239.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdec5b0 [0239.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xdec728 [0239.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0239.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec890 [0239.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea240 [0239.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec890 | out: hHeap=0x2830000) returned 1 [0239.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea240 | out: hHeap=0x2830000) returned 1 [0239.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0239.348] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.349] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0239.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0239.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xdec728 [0239.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xdec938 [0239.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec938 | out: hHeap=0x2830000) returned 1 [0239.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0239.350] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xdec728 [0239.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec728 | out: hHeap=0x2830000) returned 1 [0239.350] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdec5b0 | out: hHeap=0x2830000) returned 1 [0239.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0239.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0239.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.061] CloseHandle (hObject=0x1ec) returned 1 [0242.061] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.061] SetEndOfFile (hFile=0x1dc) returned 1 [0242.062] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja" (normalized: "c:\\program files\\mozilla firefox\\browser\\omni.ja"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\omni.ja.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\omni.ja.vhd")) returned 1 [0242.063] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0242.063] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea240 [0242.063] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdec6c8 [0242.063] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 0 [0242.063] FindClose (in: hFindFile=0xd24198 | out: hFindFile=0xd24198) returned 1 [0242.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0242.064] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.064] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0242.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea190 [0242.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7e) returned 0xdecdb8 [0242.064] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0242.064] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0242.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0242.064] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.064] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0242.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea2e0 [0242.064] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xdece40 [0242.064] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0242.064] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0242.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\rempl\\Logs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0242.068] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.068] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x87d22907, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Remediation.001.etl", cAlternateFileName="REMEDI~3.ETL")) returned 1 [0242.068] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.087] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.087] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.087] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0242.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.088] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0242.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0242.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.097] CloseHandle (hObject=0x1ec) returned 1 [0242.097] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.097] SetEndOfFile (hFile=0x1dc) returned 1 [0242.098] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.001.etl"), lpNewFileName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl.vhd" (normalized: "c:\\program files\\rempl\\logs\\remediation.001.etl.vhd")) returned 1 [0242.098] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x79e31fb0, ftLastAccessTime.dwHighDateTime=0x1d327b1, ftLastWriteTime.dwLowDateTime=0x79eac3d2, ftLastWriteTime.dwHighDateTime=0x1d327b1, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Remediation.002.etl", cAlternateFileName="REMEDI~2.ETL")) returned 1 [0242.098] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Logs\\Remediation.002.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.210] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0242.210] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0242.211] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.211] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.211] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.211] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.211] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0242.211] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.211] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.211] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.212] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0242.212] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.212] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.212] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.220] CloseHandle (hObject=0x1ec) returned 1 [0242.220] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.220] SetEndOfFile (hFile=0x1dc) returned 1 [0242.221] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\Logs\\Remediation.002.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.002.etl"), lpNewFileName="C:\\Program Files\\rempl\\Logs\\Remediation.002.etl.vhd" (normalized: "c:\\program files\\rempl\\logs\\remediation.002.etl.vhd")) returned 1 [0242.221] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x8390c831, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x39b54322, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Remediation.003.etl", cAlternateFileName="REMEDI~1.ETL")) returned 1 [0242.221] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Logs\\Remediation.003.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0242.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.235] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0242.236] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.236] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.283] CloseHandle (hObject=0x1ec) returned 1 [0242.288] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.288] SetEndOfFile (hFile=0x1dc) returned 1 [0242.288] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\Logs\\Remediation.003.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.003.etl"), lpNewFileName="C:\\Program Files\\rempl\\Logs\\Remediation.003.etl.vhd" (normalized: "c:\\program files\\rempl\\logs\\remediation.003.etl.vhd")) returned 1 [0242.289] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x8390c831, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x39b54322, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Remediation.003.etl", cAlternateFileName="REMEDI~1.ETL")) returned 0 [0242.289] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0242.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\Logs\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x87072ab1, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0x87072ab1, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0242.289] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x87072ab1, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0x87072ab1, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.289] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x87072ab1, ftLastAccessTime.dwHighDateTime=0x1d5ffe4, ftLastWriteTime.dwLowDateTime=0xcf33aa94, ftLastWriteTime.dwHighDateTime=0x1d5ffe4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.001.etl", cAlternateFileName="UN6414~1.ETL")) returned 1 [0242.289] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0242.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.303] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0242.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0242.304] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.304] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.312] CloseHandle (hObject=0x1ec) returned 1 [0242.312] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.312] SetEndOfFile (hFile=0x1dc) returned 1 [0242.313] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.001.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.001.etl.vhd")) returned 1 [0242.313] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcf0ae126, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xd12f3ee4, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.002.etl", cAlternateFileName="UN8F7C~1.ETL")) returned 1 [0242.313] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0242.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0242.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.365] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.365] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.366] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.366] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0242.366] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.366] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.366] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.367] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0242.367] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.367] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.367] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.376] CloseHandle (hObject=0x1ec) returned 1 [0242.376] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.376] SetEndOfFile (hFile=0x1dc) returned 1 [0242.376] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.002.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.002.etl.vhd")) returned 1 [0242.377] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xf95053af, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x9b236e, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.003.etl", cAlternateFileName="UN3A48~1.ETL")) returned 1 [0242.377] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.389] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.389] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.389] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0242.389] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0242.389] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.390] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.390] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.390] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.390] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.390] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.390] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.390] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.390] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0242.390] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.390] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.390] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.390] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.391] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0242.391] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.391] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.391] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.439] CloseHandle (hObject=0x1ec) returned 1 [0242.439] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.439] SetEndOfFile (hFile=0x1dc) returned 1 [0242.439] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.003.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.003.etl.vhd")) returned 1 [0242.440] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5c983e05, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f01bf05, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.004.etl", cAlternateFileName="UNE414~1.ETL")) returned 1 [0242.440] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0242.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0242.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.455] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0242.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0242.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.465] CloseHandle (hObject=0x1ec) returned 1 [0242.465] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.465] SetEndOfFile (hFile=0x1dc) returned 1 [0242.466] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.004.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.004.etl.vhd")) returned 1 [0242.466] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4308f96d, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4416619d, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.005.etl", cAlternateFileName="UN7020~1.ETL")) returned 1 [0242.466] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.514] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.515] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.516] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.517] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.518] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.519] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.520] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.521] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0242.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0242.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.521] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.521] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.522] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.522] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0242.522] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.522] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.522] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.522] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0242.523] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.523] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.531] CloseHandle (hObject=0x1ec) returned 1 [0242.532] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.532] SetEndOfFile (hFile=0x1dc) returned 1 [0242.532] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.005.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.005.etl.vhd")) returned 1 [0242.533] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x74f27e5, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0xb20ade5, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.006.etl", cAlternateFileName="UN4AAB~1.ETL")) returned 1 [0242.533] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0242.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0242.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.545] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.545] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.546] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0242.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.546] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.546] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0242.547] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.547] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.596] CloseHandle (hObject=0x1ec) returned 1 [0242.596] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.596] SetEndOfFile (hFile=0x1dc) returned 1 [0242.596] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.006.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.006.etl.vhd")) returned 1 [0242.597] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x2211c845, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ddc6c38, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.007.etl", cAlternateFileName="UN1B88~1.ETL")) returned 1 [0242.597] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.610] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0242.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.620] CloseHandle (hObject=0x1ec) returned 1 [0242.620] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.620] SetEndOfFile (hFile=0x1dc) returned 1 [0242.620] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.007.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.007.etl.vhd")) returned 1 [0242.621] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdb15d668, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xde0c0235, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.008.etl", cAlternateFileName="UNFF10~1.ETL")) returned 1 [0242.621] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.632] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.633] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.633] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.633] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0242.667] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.667] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.669] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.669] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.669] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.672] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.673] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.673] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.673] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.674] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.674] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.675] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.675] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.675] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.676] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.676] CloseHandle (hObject=0x1ec) returned 1 [0242.676] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.676] SetEndOfFile (hFile=0x1dc) returned 1 [0242.676] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.008.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.008.etl.vhd")) returned 1 [0242.677] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x264f31cb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x361fe290, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.009.etl", cAlternateFileName="UNB5F0~1.ETL")) returned 1 [0242.677] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.677] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.677] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0242.689] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0242.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.689] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.689] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.689] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.690] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0242.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.690] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.690] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0242.691] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.691] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.700] CloseHandle (hObject=0x1ec) returned 1 [0242.700] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.700] SetEndOfFile (hFile=0x1dc) returned 1 [0242.700] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.009.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.009.etl.vhd")) returned 1 [0242.701] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x86f819e6, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x885ec92b, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.010.etl", cAlternateFileName="UN7AC6~1.ETL")) returned 1 [0242.701] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0242.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.755] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.755] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.755] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.756] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.756] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0242.757] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.757] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.772] CloseHandle (hObject=0x1ec) returned 1 [0242.772] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.772] SetEndOfFile (hFile=0x1dc) returned 1 [0242.772] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.010.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.010.etl.vhd")) returned 1 [0242.773] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcd3f87c1, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xce292e60, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.011.etl", cAlternateFileName="UNIVER~4.ETL")) returned 1 [0242.773] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.011.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0242.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.787] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0242.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0242.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.827] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.827] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.827] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.833] CloseHandle (hObject=0x1ec) returned 1 [0242.833] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.833] SetEndOfFile (hFile=0x1dc) returned 1 [0242.833] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.011.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.011.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.011.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.011.etl.vhd")) returned 1 [0242.834] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x107a2333, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x107a2333, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.022.etl", cAlternateFileName="UNIVER~3.ETL")) returned 1 [0242.834] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.022.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.867] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.868] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.869] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.870] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.871] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0242.871] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.871] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.871] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.871] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.871] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.871] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.871] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.872] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.872] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.872] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0242.872] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.872] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.873] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.880] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0242.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0242.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0242.881] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0242.881] CloseHandle (hObject=0x1ec) returned 1 [0242.882] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.882] SetEndOfFile (hFile=0x1dc) returned 1 [0242.882] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.022.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.022.etl.vhd")) returned 1 [0242.883] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0xcb6ecb1, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0xcd5eb67, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.023.etl", cAlternateFileName="UNIVER~2.ETL")) returned 1 [0242.883] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.023.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.023.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0242.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0242.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0242.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0242.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0242.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0242.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0242.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.897] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0242.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0242.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.898] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0242.899] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0242.899] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0242.899] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0242.899] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0242.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0242.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0243.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0243.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0243.104] CloseHandle (hObject=0x1ec) returned 1 [0243.104] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.104] SetEndOfFile (hFile=0x1dc) returned 1 [0243.104] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.023.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.023.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.023.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.023.etl.vhd")) returned 1 [0243.105] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.030.etl", cAlternateFileName="UNIVER~1.ETL")) returned 1 [0243.105] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.030.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.030.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0243.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0243.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0243.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0243.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0243.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0243.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.119] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0243.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0243.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0243.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0243.120] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0243.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0243.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0243.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0243.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x0, lpOverlapped=0x0) returned 1 [0243.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0243.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0243.302] CloseHandle (hObject=0x1ec) returned 1 [0243.302] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.302] SetEndOfFile (hFile=0x1dc) returned 1 [0243.418] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.030.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.030.etl"), lpNewFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.030.etl.vhd" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.030.etl.vhd")) returned 1 [0243.419] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.030.etl", cAlternateFileName="UNIVER~1.ETL")) returned 0 [0243.419] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0243.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0243.419] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.419] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x865d24d3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xce2469cc, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x26, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CampaignCatalog.json", cAlternateFileName="CAMPAI~1.JSO")) returned 1 [0243.419] CreateFileW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigncatalog.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0243.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0243.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xdecec0 [0243.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xded038 [0243.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0243.430] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0243.430] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded1a0 [0243.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xdea1a0 [0243.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded1a0 | out: hHeap=0x2830000) returned 1 [0243.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdea1a0 | out: hHeap=0x2830000) returned 1 [0243.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0243.451] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.451] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0243.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0243.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xded038 [0243.451] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xded248 [0243.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded248 | out: hHeap=0x2830000) returned 1 [0243.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0243.452] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xded038 [0243.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xded038 | out: hHeap=0x2830000) returned 1 [0243.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xdecec0 | out: hHeap=0x2830000) returned 1 [0243.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x26, lpOverlapped=0x0) returned 1 [0243.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffda, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x30, lpOverlapped=0x0) returned 1 [0243.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0243.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0243.454] CloseHandle (hObject=0x1ec) returned 1 [0243.454] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.454] SetEndOfFile (hFile=0x1dc) returned 1 [0243.610] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigncatalog.json"), lpNewFileName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json.vhd" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigncatalog.json.vhd")) returned 1 [0243.611] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 1 [0243.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xdea1a0 [0243.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5e) returned 0xde3000 [0243.611] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0 [0243.611] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0243.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\Offline\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0243.612] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.612] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a0eddf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a0eddf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a0eddf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0243.612] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\Offline\\EppManifest.dll" (normalized: "c:\\program files\\windows defender\\offline\\eppmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.613] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0243.613] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\Offline\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\offline\\msmpcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.613] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0243.613] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\Offline\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\offline\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.613] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 1 [0243.613] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\Offline\\OfflineScannerShell.exe" (normalized: "c:\\program files\\windows defender\\offline\\offlinescannershell.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.614] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 0 [0243.614] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0243.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24658 [0243.616] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.616] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0243.617] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\EppManifest.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\eppmanifest.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.617] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0243.617] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.617] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0243.617] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.617] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0243.617] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.618] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpResL.dll.mui", cAlternateFileName="")) returned 1 [0243.619] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\MsMpResL.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\msmpresl.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.619] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfflineScannerShell.exe.mui", cAlternateFileName="")) returned 1 [0243.619] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\OfflineScannerShell.exe.mui" (normalized: "c:\\program files\\windows defender\\en-us\\offlinescannershell.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.620] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement.dll.mui", cAlternateFileName="")) returned 1 [0243.620] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\ProtectionManagement.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\protectionmanagement.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.620] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9063ce53, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x13c34, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement.mfl", cAlternateFileName="")) returned 1 [0243.621] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\ProtectionManagement.mfl" (normalized: "c:\\program files\\windows defender\\en-us\\protectionmanagement.mfl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.622] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mfl", cAlternateFileName="")) returned 1 [0243.622] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\ProtectionManagement_Uninstall.mfl" (normalized: "c:\\program files\\windows defender\\en-us\\protectionmanagement_uninstall.mfl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.623] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 1 [0243.623] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\en-US\\shellext.dll.mui" (normalized: "c:\\program files\\windows defender\\en-us\\shellext.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.624] FindNextFileW (in: hFindFile=0xd24658, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 0 [0243.624] FindClose (in: hFindFile=0xd24658 | out: hFindFile=0xd24658) returned 1 [0243.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24358 [0243.626] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 1 [0243.626] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\MsSense.exe.mui" (normalized: "c:\\program files\\windows defender advanced threat protection\\en-us\\mssense.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.627] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 0 [0243.627] FindClose (in: hFindFile=0xd24358 | out: hFindFile=0xd24358) returned 1 [0243.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24018 [0243.628] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.629] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b922184, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0243.629] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.629] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0243.629] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.629] FindNextFileW (in: hFindFile=0xd24018, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0243.629] FindClose (in: hFindFile=0xd24018 | out: hFindFile=0xd24018) returned 1 [0243.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0243.630] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.630] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0243.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0243.630] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0243.630] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.666] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0243.666] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0243.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0243.691] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.691] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0243.691] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.691] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0243.691] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\contentdirectory.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.692] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0243.692] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\mediareceiverregistrar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.693] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1287, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0243.693] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.694] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0243.694] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.696] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0243.696] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.696] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0243.696] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color32.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.696] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0243.696] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.697] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0243.697] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.697] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0243.697] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png" (normalized: "c:\\program files\\windows media player\\network sharing\\wmpnss_color48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.697] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0243.697] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0243.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0243.700] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.700] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0243.700] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.700] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0243.700] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.700] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0243.700] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.701] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0243.701] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.701] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0243.701] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.701] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0243.701] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.701] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0243.701] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.701] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0243.701] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\renderingcontrol_dmp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.702] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0243.702] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0243.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0243.704] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.704] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.704] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0243.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24598 [0243.706] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.706] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0243.706] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.707] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x130c5e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0243.707] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.707] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0243.707] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.707] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0243.708] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.708] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0243.708] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.708] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0243.708] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnetwk.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.708] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0243.708] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnscfg.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.708] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0243.708] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.708] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0243.708] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.709] FindNextFileW (in: hFindFile=0xd24598, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0243.709] FindClose (in: hFindFile=0xd24598 | out: hFindFile=0xd24598) returned 1 [0243.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24058 [0243.712] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.712] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded120 [0243.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x66) returned 0xdea800 [0243.712] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0243.712] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.713] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689bee27, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689bee27, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689bee27, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0243.713] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.713] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b62893, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b62893, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b62893, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0243.713] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.713] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687102e9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x687102e9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x687102e9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0243.713] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.713] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x689e508b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x689e508b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x689e508b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1 [0243.713] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.713] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0243.714] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.714] FindNextFileW (in: hFindFile=0xd24058, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1bd11b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1bd11b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a1bd11b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0243.714] FindClose (in: hFindFile=0xd24058 | out: hFindFile=0xd24058) returned 1 [0243.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24798 [0243.715] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.715] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.715] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded230 [0243.715] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x5c) returned 0xde31a0 [0243.715] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0243.715] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files\\windows nt\\accessories\\wordpad.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.715] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0243.715] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.716] FindNextFileW (in: hFindFile=0xd24798, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65418d00, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65418d00, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x65418d00, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0243.716] FindClose (in: hFindFile=0xd24798 | out: hFindFile=0xd24798) returned 1 [0243.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24418 [0243.716] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.716] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3525a5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe47aa00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0243.716] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.716] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d08f33b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0243.717] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.717] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0243.717] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.718] FindNextFileW (in: hFindFile=0xd24418, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5599, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0243.718] FindClose (in: hFindFile=0xd24418 | out: hFindFile=0xd24418) returned 1 [0243.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0243.718] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.718] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrowserCore.exe", cAlternateFileName="")) returned 1 [0243.718] CreateFileW (lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\BrowserCore.exe" (normalized: "c:\\program files\\windows security\\browsercore\\browsercore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.719] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.719] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded100 [0243.719] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x68) returned 0xdea8e0 [0243.719] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 1 [0243.719] CreateFileW (lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json" (normalized: "c:\\program files\\windows security\\browsercore\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.720] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 0 [0243.720] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0243.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\MovedPackages\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0243.723] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.723] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.723] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0243.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd246d8 [0243.726] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.726] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acde49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42acde49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42acde49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.726] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.728] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4fc4c9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.728] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded1d0 [0243.729] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd2) returned 0xded6c8 [0243.729] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acde49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42acde49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42acde49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.729] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.760] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.760] FindNextFileW (in: hFindFile=0xd246d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0243.760] FindClose (in: hFindFile=0xd246d8 | out: hFindFile=0xd246d8) returned 1 [0243.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0243.762] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.762] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b4055a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf44b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.762] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.763] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b1a300, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b1a300, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x38a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.763] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.764] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e04e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded2b0 [0243.765] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc4) returned 0xded7a8 [0243.765] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b667b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.765] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.766] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e05885, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded0f0 [0243.766] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0xde8cc8 [0243.766] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43432dd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4377950e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4377950e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b4970, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EntCommon.dll", cAlternateFileName="")) returned 1 [0243.766] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\EntCommon.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\entcommon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.766] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4377950e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43a9a68b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43a9a68b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e7f70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EntPlat.dll", cAlternateFileName="")) returned 1 [0243.766] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\EntPlat.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\entplat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.767] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a9a68b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43ae6b3d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43ae6b3d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa4570, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EntSyncFx.dll", cAlternateFileName="")) returned 1 [0243.767] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\EntSyncFx.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\entsyncfx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.767] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b0cd9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5bf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gnsdk_fp.dll", cAlternateFileName="")) returned 1 [0243.767] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\gnsdk_fp.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\gnsdk_fp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.767] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f45932, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0243.767] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded180 [0243.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0xde98c8 [0243.768] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8ee4b0ec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8ee4b0ec, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.768] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f46c57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0243.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded270 [0243.768] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283b6e0 [0243.768] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b32ff4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b7f4ac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcfb60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.768] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.768] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba5705, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44102bd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44102bd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b1b70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Video.UI.exe", cAlternateFileName="")) returned 1 [0243.768] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Video.UI.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\video.ui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.769] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba5705, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44102bd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44102bd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b1b70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Video.UI.exe", cAlternateFileName="")) returned 0 [0243.769] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0243.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0243.770] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.770] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44318cd2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44318cd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.770] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.771] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x442f2a78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x442f2a78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.771] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.771] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44318cd2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44318cd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.771] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.772] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4d06ebb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.772] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded260 [0243.772] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe6) returned 0xded878 [0243.773] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.773] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.773] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.zunevideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.773] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0243.773] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0243.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0243.776] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.776] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d014bca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d014bca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d014bca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.776] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.778] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c7df06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cfa24be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded250 [0243.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd2) returned 0xded968 [0243.779] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d014bca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d061081, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d061081, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.779] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.780] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.780] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0243.780] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0243.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0243.781] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.781] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d0ad538, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d0ad538, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12a6a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.781] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.782] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d0ad538, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d0ad538, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c3c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.782] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.783] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0d3791, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a9ac9b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d0d3791, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded170 [0243.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc4) returned 0xdeda48 [0243.783] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d0d3791, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d0d3791, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.783] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.784] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0f99eb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a9ba91, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d5567d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded1f0 [0243.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0xde92c8 [0243.784] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57ca32, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d805241, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d805241, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b4970, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EntCommon.dll", cAlternateFileName="")) returned 1 [0243.784] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\EntCommon.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\entcommon.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.785] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d82b49a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ded6d05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ded6d05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e7f70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EntPlat.dll", cAlternateFileName="")) returned 1 [0243.785] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\EntPlat.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\entplat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.785] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ded6d05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3df231c1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3df231c1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa4570, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EntSyncFx.dll", cAlternateFileName="")) returned 1 [0243.785] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\EntSyncFx.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\entsyncfx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.786] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df231c1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3df6f66f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3df6f66f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gnsdk_fp.dll", cAlternateFileName="")) returned 1 [0243.786] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\gnsdk_fp.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\gnsdk_fp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.786] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df6f66f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4bffc30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3df6f66f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0243.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded110 [0243.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xb8) returned 0xde9748 [0243.786] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x910dd35a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x910dd35a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.786] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df958cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3e05626b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3e05626b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x191570, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music.BackgroundAudioTask.dll", cAlternateFileName="")) returned 1 [0243.786] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Music.BackgroundAudioTask.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\music.backgroundaudiotask.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.787] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e05626b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3e9df935, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3e9df935, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1942970, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music.UI.exe", cAlternateFileName="")) returned 1 [0243.787] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Music.UI.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\music.ui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.788] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ea9e4fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c00eb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0243.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded200 [0243.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xbe) returned 0x283af10 [0243.788] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9df935, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ea9e4fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18d148, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.788] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.788] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9df935, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ea9e4fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18d148, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0243.788] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0243.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24198 [0243.790] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.790] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ed3b73a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ed3b73a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.790] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.791] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ed154e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ed154e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.791] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.792] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed3b73a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ed3b73a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ed3b73a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.792] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.793] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed3b73a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a3bd63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded280 [0243.793] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe6) returned 0xdedb18 [0243.793] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa241231, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.793] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eea3226, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3eea3226, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.793] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.zunemusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.793] FindNextFileW (in: hFindFile=0xd24198, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eea3226, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3eea3226, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0243.793] FindClose (in: hFindFile=0xd24198 | out: hFindFile=0xd24198) returned 1 [0243.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24458 [0243.797] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.797] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dbbf423, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa51, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.797] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.798] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dbbf423, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.798] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.799] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb497d3de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded1e0 [0243.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd6) returned 0xdedc08 [0243.799] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dbbf423, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.799] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.799] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dc02f4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb497fc88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dc1958b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded210 [0243.799] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xca) returned 0xdedce8 [0243.799] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74a814e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x92416342, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x92416342, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.800] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc1958b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dc3f813, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dc3f813, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3768, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.800] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.800] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc3f813, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dc65a6c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dc65a6c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20298, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SegXbox2.ttf", cAlternateFileName="")) returned 1 [0243.800] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SegXbox2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\segxbox2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.801] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc65a6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dc8bcca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dc8bcca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpeechToTextOverlay.winmd", cAlternateFileName="")) returned 1 [0243.801] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SpeechToTextOverlay.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\speechtotextoverlay.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.802] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc8bcca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dcfe45d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dcfe45d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpeechToTextOverlay64-Retail.exe", cAlternateFileName="")) returned 1 [0243.802] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SpeechToTextOverlay64-Retail.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\speechtotextoverlay64-retail.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.802] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc8bcca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dcfe45d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dcfe45d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpeechToTextOverlay64-Retail.exe", cAlternateFileName="")) returned 0 [0243.802] FindClose (in: hFindFile=0xd24458 | out: hFindFile=0xd24458) returned 1 [0243.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24698 [0243.840] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.840] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db26a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6db4ccfb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6db4ccfb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.840] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.840] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb48f2fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6d9f57ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.840] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded130 [0243.840] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe0) returned 0xdeddc0 [0243.840] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db4ccfb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6db4ccfb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6db4ccfb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.841] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.841] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7482029, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.841] FindNextFileW (in: hFindFile=0xd24698, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7482029, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0243.842] FindClose (in: hFindFile=0xd24698 | out: hFindFile=0xd24698) returned 1 [0243.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24498 [0243.844] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.844] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd24650, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dd24650, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dd24650, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.844] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.845] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dd24650, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dd24650, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.845] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.846] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd24650, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dd4a88d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dd4a88d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.846] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.846] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dd4a88d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb48b760b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dd96d60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded1b0 [0243.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xf0) returned 0xdedea8 [0243.847] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74a814e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.847] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ddbcfa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6ddbcfa2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6ddbcfa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.847] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxspeechtotextoverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.847] FindNextFileW (in: hFindFile=0xd24498, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ddbcfa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6ddbcfa2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6ddbcfa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0243.847] FindClose (in: hFindFile=0xd24498 | out: hFindFile=0xd24498) returned 1 [0243.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24718 [0243.850] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.850] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b53dc04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b563e5d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b563e5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.850] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.851] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb47e5156, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b373fc2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded240 [0243.851] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe2) returned 0xdedfa0 [0243.852] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b563e5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b563e5d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b563e5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.852] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.853] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6765034, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb47e59a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.853] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6765034, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb47e59a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0243.853] FindClose (in: hFindFile=0xd24718 | out: hFindFile=0xd24718) returned 1 [0243.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24218 [0243.855] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.855] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b5d6572, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b5d6572, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f77, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.855] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.856] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b5b0339, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b5b0339, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2269, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.856] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5fc7cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb46b70ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b5fc7cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.856] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded290 [0243.856] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd4) returned 0xdee090 [0243.856] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5d6572, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b5fc7cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b5fc7cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.857] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b622a24, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb47458bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b66eedc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded2a0 [0243.857] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc8) returned 0xdee170 [0243.857] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69513a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b69513a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b69513a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0243.857] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\ClrCompression.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\clrcompression.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.858] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x678b204, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.858] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69513a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b70784a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b70784a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf6358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.858] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.859] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b70784a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b85ed7b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b85ed7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ea00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XboxIdp.dll", cAlternateFileName="")) returned 1 [0243.859] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\xboxidp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.859] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b85ed7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b85ed7b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b85ed7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XboxIdp.exe", cAlternateFileName="")) returned 1 [0243.860] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\xboxidp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.860] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b85ed7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b884fd9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b884fd9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XboxIdp.Native.dll", cAlternateFileName="")) returned 1 [0243.860] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Native.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\xboxidp.native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.861] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b884fd9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b884fd9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b884fd9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XboxIdp.Native.winmd", cAlternateFileName="")) returned 1 [0243.861] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Native.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\xboxidp.native.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.862] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b884fd9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b8ab237, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b8ab237, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XboxIdp.Tasks.winmd", cAlternateFileName="")) returned 1 [0243.862] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Tasks.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe\\xboxidp.tasks.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.862] FindNextFileW (in: hFindFile=0xd24218, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b884fd9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b8ab237, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b8ab237, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XboxIdp.Tasks.winmd", cAlternateFileName="")) returned 0 [0243.862] FindClose (in: hFindFile=0xd24218 | out: hFindFile=0xd24218) returned 1 [0243.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0243.863] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.863] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b5d9ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.863] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.865] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b5d9ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x128a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.865] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.865] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb45ebf24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded140 [0243.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xc6) returned 0xdee240 [0243.865] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b5d9ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.865] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.867] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb46b4450, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b83c34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded1a0 [0243.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b230 [0243.867] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ba9e8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77ba9e8d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77ba9e8d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GameBar.exe", cAlternateFileName="")) returned 1 [0243.868] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBar.exe" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\gamebar.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.869] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ba9e8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77ba9e8d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77ba9e8d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GameBar.winmd", cAlternateFileName="")) returned 1 [0243.869] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBar.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\gamebar.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.869] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ba9e8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77bf6344, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77bf6344, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GameBarTasks.dll", cAlternateFileName="")) returned 1 [0243.869] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBarTasks.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\gamebartasks.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.870] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bf6344, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77bf6344, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77bf6344, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GameBarTasks.winmd", cAlternateFileName="")) returned 1 [0243.870] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBarTasks.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\gamebartasks.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.871] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bf6344, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c1c5a2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c1c5a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x51440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="")) returned 1 [0243.871] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\KnownGameList.bin" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\knowngamelist.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.871] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x93541eb1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93541eb1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.871] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c1c5a2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c427fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c427fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.871] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.872] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c1c5a2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c427fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c427fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0243.872] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0243.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0243.875] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.875] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77aeb2ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77aeb2ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77aeb2ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.875] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.876] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb453b7da, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77993d99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.876] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded190 [0243.876] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xd0) returned 0xdee310 [0243.876] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77aeb2ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b3777d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b3777d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.877] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.877] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.878] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0243.878] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0243.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24318 [0243.916] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.916] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c68a55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c8ecb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c8ecb3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.916] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.917] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c427fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c427fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.918] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.918] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c8ecb3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77cb4f0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77cb4f0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.918] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.919] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77cb4f0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb44d2941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77d2c754, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.919] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded150 [0243.919] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe0) returned 0xdee3e8 [0243.919] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5aba784, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.919] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ecce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77d2ecce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77d2ecce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0243.919] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxgameoverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.919] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ecce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77d2ecce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77d2ecce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0243.919] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0243.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24398 [0243.923] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.923] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72452733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72452733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72452733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1525e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0243.923] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.924] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7242c4d5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7242c4d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a69, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0243.924] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.925] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb414678b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7247898c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0243.925] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded160 [0243.925] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xba) returned 0x283b618 [0243.925] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72452733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7247898c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7247898c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0243.925] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.926] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725a9c6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4260cb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72abd1b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0243.926] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded1c0 [0243.926] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xae) returned 0x283d5b8 [0243.926] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae340e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72b55b1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72b55b1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x339000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Avatars.dll", cAlternateFileName="")) returned 1 [0243.926] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Avatars.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\avatars.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.928] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b55b1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72b55b1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72b55b1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Avatars.winmd", cAlternateFileName="")) returned 1 [0243.928] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Avatars.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\avatars.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.928] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b55b1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72b55b1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72b55b1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BuildInfo.xml", cAlternateFileName="")) returned 1 [0243.928] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\BuildInfo.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\buildinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.929] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b7bd81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0243.929] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\ClrCompression.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\clrcompression.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.930] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FacebookDialog.xbf", cAlternateFileName="")) returned 1 [0243.930] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookDialog.xbf" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\facebookdialog.xbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.935] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FacebookLoginButton.xbf", cAlternateFileName="")) returned 1 [0243.935] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookLoginButton.xbf" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\facebookloginbutton.xbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.935] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FacebookProfilePictureControl.xbf", cAlternateFileName="")) returned 1 [0243.935] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookProfilePictureControl.xbf" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\facebookprofilepicturecontrol.xbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.940] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x102c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fb_blank_profile_portrait.png", cAlternateFileName="")) returned 1 [0243.941] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\fb_blank_profile_portrait.png" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\fb_blank_profile_portrait.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.948] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bc822f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c146e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c146e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gamerpics.dll", cAlternateFileName="")) returned 1 [0243.948] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Gamerpics.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\gamerpics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.948] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c146e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c3a93f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c3a93f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gamerpics.winmd", cAlternateFileName="")) returned 1 [0243.948] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Gamerpics.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\gamerpics.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.948] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c3a93f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c3a93f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c3a93f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 1 [0243.949] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Generic.xbf" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\generic.xbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.949] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb42aefde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0243.949] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c3a93f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c60b9d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c60b9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x44200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Xbox.NetworkTroubleshooter.dll", cAlternateFileName="")) returned 1 [0243.949] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.NetworkTroubleshooter.dll" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\microsoft.xbox.networktroubleshooter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.950] FindNextFileW (in: hFindFile=0xd24398, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c60b9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c86df6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c86df6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Xbox.NetworkTroubleshooter.winmd", cAlternateFileName="")) returned 1 [0243.950] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.NetworkTroubleshooter.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.xboxapp_25.25.13009.0_x64__8wekyb3d8bbwe\\microsoft.xbox.networktroubleshooter.winmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0243.952] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xded220 [0243.952] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0xe6) returned 0xdee4d0 [0256.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0256.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.153] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0256.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e28 [0256.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0256.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e28 | out: hHeap=0x2830000) returned 1 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0256.154] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.154] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0256.154] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0256.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0256.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0256.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0256.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0256.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0256.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0256.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0256.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0256.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0256.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0256.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0256.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0256.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf20, lpOverlapped=0x0) returned 1 [0256.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0e0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf20, lpOverlapped=0x0) returned 1 [0256.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0256.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0256.208] CloseHandle (hObject=0x1ec) returned 1 [0256.208] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.208] SetEndOfFile (hFile=0x1dc) returned 1 [0256.208] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\VisualElements_150.png" (normalized: "c:\\program files\\mozilla firefox\\browser\\visualelements\\visualelements_150.png"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\VisualElements_150.png.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\visualelements\\visualelements_150.png.vhd")) returned 1 [0256.210] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7d339e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x2f33, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="VisualElements_70.png", cAlternateFileName="VISUAL~2.PNG")) returned 1 [0256.210] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\VisualElements_70.png" (normalized: "c:\\program files\\mozilla firefox\\browser\\visualelements\\visualelements_70.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0256.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0256.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0256.231] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0256.231] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0256.231] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0256.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0256.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0256.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e48 [0256.232] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.232] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0256.232] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e48 | out: hHeap=0x2830000) returned 1 [0256.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0256.232] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.232] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0256.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0256.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0256.232] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0256.232] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.232] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0256.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0256.234] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0256.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0256.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0256.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0256.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0256.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf33, lpOverlapped=0x0) returned 1 [0256.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0cd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf40, lpOverlapped=0x0) returned 1 [0256.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0256.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0256.264] CloseHandle (hObject=0x1ec) returned 1 [0256.264] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.265] SetEndOfFile (hFile=0x1dc) returned 1 [0256.265] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\VisualElements_70.png" (normalized: "c:\\program files\\mozilla firefox\\browser\\visualelements\\visualelements_70.png"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\VisualElements_70.png.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\visualelements\\visualelements_70.png.vhd")) returned 1 [0256.266] FindNextFileW (in: hFindFile=0xd24318, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7d339e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x2f33, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="VisualElements_70.png", cAlternateFileName="VISUAL~2.PNG")) returned 0 [0256.266] FindClose (in: hFindFile=0xd24318 | out: hFindFile=0xd24318) returned 1 [0256.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24758 [0256.413] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.413] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7f95f1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7f95f1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x221e, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="aushelper@mozilla.org.xpi", cAlternateFileName="AUSHEL~1.XPI")) returned 1 [0256.413] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\aushelper@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\aushelper@mozilla.org.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0256.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0258.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.436] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.437] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.438] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0258.440] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ea8 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ea8 | out: hHeap=0x2830000) returned 1 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.441] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0258.441] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.441] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0258.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0258.442] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0258.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.442] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0258.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0258.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0258.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0258.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x21e, lpOverlapped=0x0) returned 1 [0258.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffde2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0258.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x220, lpOverlapped=0x0) returned 1 [0258.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0258.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0258.446] CloseHandle (hObject=0x1ec) returned 1 [0258.446] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.446] SetEndOfFile (hFile=0x1dc) returned 1 [0258.450] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\aushelper@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\aushelper@mozilla.org.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\aushelper@mozilla.org.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\aushelper@mozilla.org.xpi.vhd")) returned 1 [0258.451] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed81f880, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed81f880, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="clicktoplay-rollout@mozilla.org.xpi", cAlternateFileName="CLICKT~1.XPI")) returned 1 [0258.451] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\clicktoplay-rollout@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\clicktoplay-rollout@mozilla.org.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0258.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0258.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0258.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0258.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0258.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0258.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0258.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.560] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0258.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0258.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0258.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0258.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0258.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0258.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0258.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0258.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0258.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16eb, lpOverlapped=0x0) returned 1 [0258.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe915, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0258.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16f0, lpOverlapped=0x0) returned 1 [0258.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0258.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0258.634] CloseHandle (hObject=0x1ec) returned 1 [0258.634] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0258.634] SetEndOfFile (hFile=0x1dc) returned 1 [0258.634] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\clicktoplay-rollout@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\clicktoplay-rollout@mozilla.org.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\clicktoplay-rollout@mozilla.org.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\clicktoplay-rollout@mozilla.org.xpi.vhd")) returned 1 [0258.635] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed845ae9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed845ae9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x34dd, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="e10srollout@mozilla.org.xpi", cAlternateFileName="E10SRO~1.XPI")) returned 1 [0258.635] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\e10srollout@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\e10srollout@mozilla.org.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0258.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0258.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0261.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0261.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0261.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.601] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.601] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0261.601] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0261.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.602] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0261.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0261.603] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.603] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0261.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14dd, lpOverlapped=0x0) returned 1 [0261.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14e0, lpOverlapped=0x0) returned 1 [0261.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0261.789] CloseHandle (hObject=0x1ec) returned 1 [0261.790] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.790] SetEndOfFile (hFile=0x1dc) returned 1 [0261.790] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\e10srollout@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\e10srollout@mozilla.org.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\e10srollout@mozilla.org.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\e10srollout@mozilla.org.xpi.vhd")) returned 1 [0261.791] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed86bd43, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed86bd43, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd4f77, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="firefox@getpocket.com.xpi", cAlternateFileName="FIREFO~1.XPI")) returned 1 [0261.791] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\firefox@getpocket.com.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\firefox@getpocket.com.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0261.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.804] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.805] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.806] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.809] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e28 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e28 | out: hHeap=0x2830000) returned 1 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.810] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0261.810] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.810] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0261.811] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0261.811] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.811] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.811] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0261.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.828] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.828] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.828] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf77, lpOverlapped=0x0) returned 1 [0261.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff089, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf80, lpOverlapped=0x0) returned 1 [0261.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0261.894] CloseHandle (hObject=0x1ec) returned 1 [0261.894] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.894] SetEndOfFile (hFile=0x1dc) returned 1 [0261.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\firefox@getpocket.com.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\firefox@getpocket.com.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\firefox@getpocket.com.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\firefox@getpocket.com.xpi.vhd")) returned 1 [0261.897] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedace38c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedace38c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x434c, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="followonsearch@mozilla.com.xpi", cAlternateFileName="FOLLOW~1.XPI")) returned 1 [0261.897] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\followonsearch@mozilla.com.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\followonsearch@mozilla.com.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0261.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0261.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0261.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0261.912] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0261.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0261.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ef8 [0261.912] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.912] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0261.912] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ef8 | out: hHeap=0x2830000) returned 1 [0261.912] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.912] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.913] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0261.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0261.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0261.913] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0261.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.913] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0261.914] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0261.914] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.914] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.914] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0261.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x34c, lpOverlapped=0x0) returned 1 [0261.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffcb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x350, lpOverlapped=0x0) returned 1 [0261.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0261.917] CloseHandle (hObject=0x1ec) returned 1 [0261.917] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.917] SetEndOfFile (hFile=0x1dc) returned 1 [0261.917] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\followonsearch@mozilla.com.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\followonsearch@mozilla.com.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\followonsearch@mozilla.com.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\followonsearch@mozilla.com.xpi.vhd")) returned 1 [0261.918] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedace38c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedace38c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xae84c600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xb3296, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="screenshots@mozilla.org.xpi", cAlternateFileName="SCREEN~1.XPI")) returned 1 [0261.918] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\screenshots@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\screenshots@mozilla.org.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0261.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0261.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e08 [0261.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0261.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e08 | out: hHeap=0x2830000) returned 1 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.939] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0261.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0261.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0261.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0261.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0261.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0261.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0261.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1296, lpOverlapped=0x0) returned 1 [0261.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed6a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12a0, lpOverlapped=0x0) returned 1 [0261.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0261.982] CloseHandle (hObject=0x1ec) returned 1 [0261.982] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0261.983] SetEndOfFile (hFile=0x1dc) returned 1 [0261.984] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\screenshots@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\screenshots@mozilla.org.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\screenshots@mozilla.org.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\screenshots@mozilla.org.xpi.vhd")) returned 1 [0261.984] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedaf45e9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedaf45e9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x238c3, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="shield-recipe-client@mozilla.org.xpi", cAlternateFileName="SHIELD~1.XPI")) returned 1 [0261.984] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\shield-recipe-client@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\shield-recipe-client@mozilla.org.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0261.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0261.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0261.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0261.999] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0261.999] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.999] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0261.999] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0261.999] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0261.999] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0261.999] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0262.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0262.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0262.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0262.000] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0262.000] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0262.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18c3, lpOverlapped=0x0) returned 1 [0262.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe73d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18d0, lpOverlapped=0x0) returned 1 [0262.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.014] CloseHandle (hObject=0x1ec) returned 1 [0262.014] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.014] SetEndOfFile (hFile=0x1dc) returned 1 [0262.014] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\shield-recipe-client@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\shield-recipe-client@mozilla.org.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\shield-recipe-client@mozilla.org.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\shield-recipe-client@mozilla.org.xpi.vhd")) returned 1 [0262.015] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb1a83d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x25a6, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="webcompat@mozilla.org.xpi", cAlternateFileName="WEBCOM~1.XPI")) returned 1 [0262.015] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\webcompat@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\webcompat@mozilla.org.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.047] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0262.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0262.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0262.047] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0262.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0262.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17d88 [0262.047] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.047] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0262.047] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17d88 | out: hHeap=0x2830000) returned 1 [0262.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.047] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.048] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0262.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0262.048] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0262.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.048] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0262.049] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0262.049] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.049] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.049] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0262.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5a6, lpOverlapped=0x0) returned 1 [0262.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffa5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x5b0, lpOverlapped=0x0) returned 1 [0262.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.051] CloseHandle (hObject=0x1ec) returned 1 [0262.051] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.051] SetEndOfFile (hFile=0x1dc) returned 1 [0262.051] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\webcompat@mozilla.org.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\webcompat@mozilla.org.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\features\\webcompat@mozilla.org.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\features\\webcompat@mozilla.org.xpi.vhd")) returned 1 [0262.052] FindNextFileW (in: hFindFile=0xd24758, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb1a83d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x25a6, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="webcompat@mozilla.org.xpi", cAlternateFileName="WEBCOM~1.XPI")) returned 0 [0262.052] FindClose (in: hFindFile=0xd24758 | out: hFindFile=0xd24758) returned 1 [0262.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24118 [0262.053] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.053] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb40aac, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1e83, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi", cAlternateFileName="{972CE~1.XPI")) returned 1 [0262.053] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0262.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0262.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0262.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.084] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.084] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.084] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0262.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0262.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0262.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0262.085] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0262.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0262.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e83, lpOverlapped=0x0) returned 1 [0262.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe17d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e90, lpOverlapped=0x0) returned 1 [0262.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.087] CloseHandle (hObject=0x1ec) returned 1 [0262.087] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.087] SetEndOfFile (hFile=0x1dc) returned 1 [0262.088] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi" (normalized: "c:\\program files\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi.vhd" (normalized: "c:\\program files\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi.vhd")) returned 1 [0262.088] FindNextFileW (in: hFindFile=0xd24118, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb40aac, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1e83, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi", cAlternateFileName="{972CE~1.XPI")) returned 0 [0262.088] FindClose (in: hFindFile=0xd24118 | out: hFindFile=0xd24118) returned 1 [0262.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24358 [0262.089] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.089] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5ea5ff00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0262.089] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.102] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0262.103] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ef8 [0262.103] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.103] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0262.103] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ef8 | out: hHeap=0x2830000) returned 1 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.103] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.103] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0262.103] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0262.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.104] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0262.105] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0262.105] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.105] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.105] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0262.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf5, lpOverlapped=0x0) returned 1 [0262.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x100, lpOverlapped=0x0) returned 1 [0262.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.109] CloseHandle (hObject=0x1ec) returned 1 [0262.109] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.109] SetEndOfFile (hFile=0x1dc) returned 1 [0262.110] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js" (normalized: "c:\\program files\\mozilla firefox\\defaults\\pref\\channel-prefs.js"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\channel-prefs.js.vhd" (normalized: "c:\\program files\\mozilla firefox\\defaults\\pref\\channel-prefs.js.vhd")) returned 1 [0262.111] FindNextFileW (in: hFindFile=0xd24358, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5ea5ff00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0 [0262.111] FindClose (in: hFindFile=0xd24358 | out: hFindFile=0xd24358) returned 1 [0262.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24718 [0262.112] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.112] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9c0a8c80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x179d0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="clearkey.dll", cAlternateFileName="")) returned 1 [0262.112] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\clearkey.dll" (normalized: "c:\\program files\\mozilla firefox\\gmp-clearkey\\0.1\\clearkey.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0262.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0262.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0262.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.130] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.130] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.130] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0262.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0262.131] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0262.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0262.131] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0262.132] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.132] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0262.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x19d0, lpOverlapped=0x0) returned 1 [0262.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x19d0, lpOverlapped=0x0) returned 1 [0262.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.373] CloseHandle (hObject=0x1ec) returned 1 [0262.373] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.373] SetEndOfFile (hFile=0x1dc) returned 1 [0262.373] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\clearkey.dll" (normalized: "c:\\program files\\mozilla firefox\\gmp-clearkey\\0.1\\clearkey.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\clearkey.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\gmp-clearkey\\0.1\\clearkey.dll.vhd")) returned 1 [0262.374] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb87321, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0262.374] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\manifest.json" (normalized: "c:\\program files\\mozilla firefox\\gmp-clearkey\\0.1\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.392] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe18a68 [0262.392] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe18be0 [0262.392] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0262.393] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0262.393] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18d48 [0262.393] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0262.393] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.393] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18d48 | out: hHeap=0x2830000) returned 1 [0262.393] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0262.393] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.393] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.393] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.393] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0262.393] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe18be0 [0262.393] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe18df0 [0262.393] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.394] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18df0 | out: hHeap=0x2830000) returned 1 [0262.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0262.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe18be0 [0262.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18be0 | out: hHeap=0x2830000) returned 1 [0262.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe18a68 | out: hHeap=0x2830000) returned 1 [0262.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe3, lpOverlapped=0x0) returned 1 [0262.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff1d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf0, lpOverlapped=0x0) returned 1 [0262.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.397] CloseHandle (hObject=0x1ec) returned 1 [0262.397] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.397] SetEndOfFile (hFile=0x1dc) returned 1 [0262.397] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\manifest.json" (normalized: "c:\\program files\\mozilla firefox\\gmp-clearkey\\0.1\\manifest.json"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\manifest.json.vhd" (normalized: "c:\\program files\\mozilla firefox\\gmp-clearkey\\0.1\\manifest.json.vhd")) returned 1 [0262.398] FindNextFileW (in: hFindFile=0xd24718, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb87321, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 0 [0262.398] FindClose (in: hFindFile=0xd24718 | out: hFindFile=0xd24718) returned 1 [0262.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd245d8 [0262.399] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.399] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Common AppData", cAlternateFileName="COMMON~2")) returned 1 [0262.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f18 [0262.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xe01040 [0262.399] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1 [0262.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17ef8 [0262.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xe00ac0 [0262.399] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0262.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f28 [0262.399] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x62) returned 0xe19588 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~3")) returned 1 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17ed8 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x82) returned 0xe19a70 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e28 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x82) returned 0xe19b00 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f38 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xe00fc0 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17eb8 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x76) returned 0xe01740 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17d88 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x64) returned 0xe18a98 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e98 [0262.400] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0xdec830 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0262.400] FindNextFileW (in: hFindFile=0xd245d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0262.400] FindClose (in: hFindFile=0xd245d8 | out: hFindFile=0xd245d8) returned 1 [0262.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd244d8 [0262.404] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.404] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0262.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e08 [0262.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6c) returned 0xdecb78 [0262.404] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0262.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f08 [0262.404] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8c) returned 0xe19b90 [0262.404] FindNextFileW (in: hFindFile=0xd244d8, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0262.405] FindClose (in: hFindFile=0xd244d8 | out: hFindFile=0xd244d8) returned 1 [0262.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24518 [0262.405] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.405] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0262.405] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f58 [0262.405] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6e) returned 0xdec7b8 [0262.405] FindNextFileW (in: hFindFile=0xd24518, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0262.405] FindClose (in: hFindFile=0xd24518 | out: hFindFile=0xd24518) returned 1 [0262.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24458 [0262.459] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.460] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21b9b, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ACCESS~1.DAT")) returned 1 [0262.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0262.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0262.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0262.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0262.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0262.539] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0262.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.539] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0262.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0262.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.540] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0262.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0262.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0262.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0262.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0262.541] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.541] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0262.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1b9b, lpOverlapped=0x0) returned 1 [0262.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe465, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ba0, lpOverlapped=0x0) returned 1 [0262.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.588] CloseHandle (hObject=0x1ec) returned 1 [0262.588] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.588] SetEndOfFile (hFile=0x1dc) returned 1 [0262.588] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0262.589] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf475553, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x44d12, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ACCESS~4.DAT")) returned 1 [0262.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0262.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0262.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0262.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.625] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0262.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0262.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0262.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0262.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0262.627] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0262.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd12, lpOverlapped=0x0) returned 1 [0262.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd20, lpOverlapped=0x0) returned 1 [0262.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.778] CloseHandle (hObject=0x1ec) returned 1 [0262.778] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.779] SetEndOfFile (hFile=0x1dc) returned 1 [0262.779] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0262.780] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9376, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="accessmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~3.DAT")) returned 1 [0262.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0262.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0262.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0262.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0262.834] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0262.834] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0262.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0262.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0262.834] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.834] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.835] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.835] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0262.835] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0262.835] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0262.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0262.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0262.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.836] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0262.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1376, lpOverlapped=0x0) returned 1 [0262.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec8a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1380, lpOverlapped=0x0) returned 1 [0262.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.841] CloseHandle (hObject=0x1ec) returned 1 [0262.841] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.841] SetEndOfFile (hFile=0x1dc) returned 1 [0262.842] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0262.842] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d0baf0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9623, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="accessmui.msi.16.en-us.tree.dat", cAlternateFileName="ACC776~1.DAT")) returned 1 [0262.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.859] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0262.860] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0262.860] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.860] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0262.860] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.860] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.860] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0262.860] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0262.861] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0262.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.861] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0262.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0262.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0262.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.863] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.863] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0262.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0262.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1623, lpOverlapped=0x0) returned 1 [0262.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe9dd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1630, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1630, lpOverlapped=0x0) returned 1 [0262.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.870] CloseHandle (hObject=0x1ec) returned 1 [0262.870] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.870] SetEndOfFile (hFile=0x1dc) returned 1 [0262.871] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0262.871] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="accessmuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~2.DAT")) returned 1 [0262.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0262.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0262.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0262.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0262.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0262.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e18 [0262.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0262.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e18 | out: hHeap=0x2830000) returned 1 [0262.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.942] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.942] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0262.942] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0262.942] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0262.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.943] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0262.945] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0262.945] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.945] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.945] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0262.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd02, lpOverlapped=0x0) returned 1 [0262.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2fe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd10, lpOverlapped=0x0) returned 1 [0262.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.946] CloseHandle (hObject=0x1ec) returned 1 [0262.947] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.947] SetEndOfFile (hFile=0x1dc) returned 1 [0262.959] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0262.960] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04ffae9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="accessmuiset.msi.16.en-us.tree.dat", cAlternateFileName="AC82F7~1.DAT")) returned 1 [0262.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0262.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0262.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0262.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0262.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0262.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e18 [0262.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0262.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e18 | out: hHeap=0x2830000) returned 1 [0262.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.987] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0262.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0262.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0262.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0262.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0262.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0262.988] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0262.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0262.989] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0262.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x11b8, lpOverlapped=0x0) returned 1 [0262.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x11c0, lpOverlapped=0x0) returned 1 [0262.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0262.991] CloseHandle (hObject=0x1ec) returned 1 [0262.991] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.991] SetEndOfFile (hFile=0x1dc) returned 1 [0262.991] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat.vhd")) returned 1 [0262.992] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142b0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="dcf.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="DCFX-N~1.DAT")) returned 1 [0262.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0262.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0262.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0262.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.002] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.003] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0263.018] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0263.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.018] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0263.018] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.018] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0263.019] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.019] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.019] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0263.019] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.019] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.019] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.020] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0263.020] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.023] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2b0, lpOverlapped=0x0) returned 1 [0263.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2b0, lpOverlapped=0x0) returned 1 [0263.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.031] CloseHandle (hObject=0x1ec) returned 1 [0263.031] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.031] SetEndOfFile (hFile=0x1dc) returned 1 [0263.031] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0263.032] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf6fdca2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25e95, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="dcf.x-none.msi.16.x-none.tree.dat", cAlternateFileName="DCFX-N~2.DAT")) returned 1 [0263.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.050] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.051] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.052] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.053] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0263.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0263.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.065] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0263.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.065] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0263.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.066] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0263.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.066] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.066] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0263.067] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.067] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e95, lpOverlapped=0x0) returned 1 [0263.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe16b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ea0, lpOverlapped=0x0) returned 1 [0263.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.078] CloseHandle (hObject=0x1ec) returned 1 [0263.078] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.078] SetEndOfFile (hFile=0x1dc) returned 1 [0263.078] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0263.079] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="dcfmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="DCFMUI~1.DAT")) returned 1 [0263.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0263.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0263.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.097] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0263.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.097] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0263.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.098] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0263.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0263.099] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1afe, lpOverlapped=0x0) returned 1 [0263.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe502, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1b00, lpOverlapped=0x0) returned 1 [0263.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.101] CloseHandle (hObject=0x1ec) returned 1 [0263.101] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.101] SetEndOfFile (hFile=0x1dc) returned 1 [0263.102] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0263.102] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd054bfa0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c6, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="dcfmui.msi.16.en-us.tree.dat", cAlternateFileName="DCFMUI~2.DAT")) returned 1 [0263.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0263.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0263.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0263.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.124] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0263.124] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.125] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.125] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0263.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.125] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.125] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.125] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.126] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0263.127] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.127] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc6, lpOverlapped=0x0) returned 1 [0263.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff3a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd0, lpOverlapped=0x0) returned 1 [0263.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.136] CloseHandle (hObject=0x1ec) returned 1 [0263.136] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.136] SetEndOfFile (hFile=0x1dc) returned 1 [0263.137] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0263.138] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58b03, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="excel.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="EXCELX~1.DAT")) returned 1 [0263.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0263.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0263.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.158] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0263.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.158] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.158] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.159] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0263.159] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.159] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.159] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb03, lpOverlapped=0x0) returned 1 [0263.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4fd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb10, lpOverlapped=0x0) returned 1 [0263.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.183] CloseHandle (hObject=0x1ec) returned 1 [0263.183] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.183] SetEndOfFile (hFile=0x1dc) returned 1 [0263.184] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0263.185] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcee3319e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94277, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="excel.x-none.msi.16.x-none.tree.dat", cAlternateFileName="EXCELX~2.DAT")) returned 1 [0263.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.205] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.206] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0263.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0263.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0263.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0263.207] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.207] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.207] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0263.207] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.207] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.207] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.209] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0263.209] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.209] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.209] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x277, lpOverlapped=0x0) returned 1 [0263.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd89, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0263.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.244] CloseHandle (hObject=0x1ec) returned 1 [0263.244] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.244] SetEndOfFile (hFile=0x1dc) returned 1 [0263.245] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0263.246] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57ec, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="excelmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="EXCELM~1.DAT")) returned 1 [0263.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0263.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0263.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.262] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0263.263] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.263] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x17ec, lpOverlapped=0x0) returned 1 [0263.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe814, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x17f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x17f0, lpOverlapped=0x0) returned 1 [0263.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.267] CloseHandle (hObject=0x1ec) returned 1 [0263.268] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.268] SetEndOfFile (hFile=0x1dc) returned 1 [0263.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0263.269] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd048d683, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x646e, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="excelmui.msi.16.en-us.tree.dat", cAlternateFileName="EXCELM~2.DAT")) returned 1 [0263.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0263.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0263.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ee8 [0263.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ee8 | out: hHeap=0x2830000) returned 1 [0263.283] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.283] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.284] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0263.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0263.285] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x46e, lpOverlapped=0x0) returned 1 [0263.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb92, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x470, lpOverlapped=0x0) returned 1 [0263.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.289] CloseHandle (hObject=0x1ec) returned 1 [0263.289] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.289] SetEndOfFile (hFile=0x1dc) returned 1 [0263.289] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0263.300] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4276, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="groove.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="GROOVE~1.DAT")) returned 1 [0263.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0263.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0263.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.332] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0263.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.332] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0263.333] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.333] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.334] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.334] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0263.334] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.334] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.334] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.334] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.335] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0263.335] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.335] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.335] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x276, lpOverlapped=0x0) returned 1 [0263.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd8a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x280, lpOverlapped=0x0) returned 1 [0263.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.338] CloseHandle (hObject=0x1ec) returned 1 [0263.338] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.338] SetEndOfFile (hFile=0x1dc) returned 1 [0263.338] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0263.339] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf0e1caa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x621d, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="groove.x-none.msi.16.x-none.tree.dat", cAlternateFileName="GROOVE~3.DAT")) returned 1 [0263.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.352] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0263.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0263.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0263.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0263.357] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.357] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.358] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.358] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0263.358] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.358] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.358] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.358] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.359] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0263.359] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.359] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.359] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x21d, lpOverlapped=0x0) returned 1 [0263.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffde3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x220, lpOverlapped=0x0) returned 1 [0263.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.435] CloseHandle (hObject=0x1ec) returned 1 [0263.435] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.435] SetEndOfFile (hFile=0x1dc) returned 1 [0263.435] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0263.436] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x127a, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="groovemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="GROOVE~2.DAT")) returned 1 [0263.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.439] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.440] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.441] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.442] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.443] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.444] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.455] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0263.455] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0263.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0263.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0263.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.456] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0263.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.456] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.456] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0263.458] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.458] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x127a, lpOverlapped=0x0) returned 1 [0263.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed86, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1280, lpOverlapped=0x0) returned 1 [0263.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.460] CloseHandle (hObject=0x1ec) returned 1 [0263.460] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.460] SetEndOfFile (hFile=0x1dc) returned 1 [0263.460] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0263.461] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04b3616, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x179f, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="groovemui.msi.16.en-us.tree.dat", cAlternateFileName="GROOVE~4.DAT")) returned 1 [0263.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.586] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.587] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.588] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.589] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.590] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.591] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.592] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.593] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.594] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.594] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.594] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.594] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0263.594] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0263.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0263.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0263.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.595] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0263.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.595] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.595] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.596] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0263.597] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.597] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x179f, lpOverlapped=0x0) returned 1 [0263.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe861, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x17a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x17a0, lpOverlapped=0x0) returned 1 [0263.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.599] CloseHandle (hObject=0x1ec) returned 1 [0263.599] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.599] SetEndOfFile (hFile=0x1dc) returned 1 [0263.600] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat.vhd")) returned 1 [0263.601] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x40ee9, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="lync.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="LYNCX-~1.DAT")) returned 1 [0263.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.620] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0263.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0263.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17da8 [0263.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17da8 | out: hHeap=0x2830000) returned 1 [0263.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.621] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.621] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0263.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.621] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.622] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0263.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.623] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.655] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xee9, lpOverlapped=0x0) returned 1 [0263.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff117, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xef0, lpOverlapped=0x0) returned 1 [0263.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.657] CloseHandle (hObject=0x1ec) returned 1 [0263.657] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.657] SetEndOfFile (hFile=0x1dc) returned 1 [0263.658] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0263.660] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf2391cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf2391cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf8c794a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af1e, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="lync.x-none.msi.16.x-none.tree.dat", cAlternateFileName="LYNCX-~2.DAT")) returned 1 [0263.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.693] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.694] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0263.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0263.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ee8 [0263.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ee8 | out: hHeap=0x2830000) returned 1 [0263.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.696] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.696] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0263.696] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.696] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.696] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.696] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0263.697] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.697] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.698] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.721] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf1e, lpOverlapped=0x0) returned 1 [0263.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf20, lpOverlapped=0x0) returned 1 [0263.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.731] CloseHandle (hObject=0x1ec) returned 1 [0263.731] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.731] SetEndOfFile (hFile=0x1dc) returned 1 [0263.731] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0263.732] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2740, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="lyncmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="LYNCMU~1.DAT")) returned 1 [0263.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0263.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0263.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0263.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0263.758] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.758] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.758] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0263.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.759] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0263.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x740, lpOverlapped=0x0) returned 1 [0263.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff8c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x740, lpOverlapped=0x0) returned 1 [0263.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.763] CloseHandle (hObject=0x1ec) returned 1 [0263.763] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.763] SetEndOfFile (hFile=0x1dc) returned 1 [0263.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0263.764] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03f4a77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f36, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="lyncmui.msi.16.en-us.tree.dat", cAlternateFileName="LYNCMU~2.DAT")) returned 1 [0263.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0263.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0263.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0263.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0263.783] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.783] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.783] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0263.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0263.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf36, lpOverlapped=0x0) returned 1 [0263.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0ca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf40, lpOverlapped=0x0) returned 1 [0263.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.792] CloseHandle (hObject=0x1ec) returned 1 [0263.792] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.792] SetEndOfFile (hFile=0x1dc) returned 1 [0263.793] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0263.794] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa06c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="office.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~2.DAT")) returned 1 [0263.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.807] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.808] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.809] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.810] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.811] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.812] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0263.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0263.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.821] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.822] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.823] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0263.823] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.823] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.823] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.885] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.885] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.886] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.886] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6c0, lpOverlapped=0x0) returned 1 [0263.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0263.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0263.898] CloseHandle (hObject=0x1ec) returned 1 [0263.898] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.898] SetEndOfFile (hFile=0x1dc) returned 1 [0263.916] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0263.917] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0440f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff0cc, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="office.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OFDF3A~1.DAT")) returned 1 [0263.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0263.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0263.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0263.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0263.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0263.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0263.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0263.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0263.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0263.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0263.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0263.940] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.941] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0263.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0263.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0263.941] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0263.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.941] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0263.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0263.949] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0263.949] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0263.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0263.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.952] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0263.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0263.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10cc, lpOverlapped=0x0) returned 1 [0264.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10d0, lpOverlapped=0x0) returned 1 [0264.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.072] CloseHandle (hObject=0x1ec) returned 1 [0264.072] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.072] SetEndOfFile (hFile=0x1dc) returned 1 [0264.074] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0264.075] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ae, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="office32mui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OF09D4~1.DAT")) returned 1 [0264.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0264.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0264.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ea8 [0264.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.098] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ea8 | out: hHeap=0x2830000) returned 1 [0264.098] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.099] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.100] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0264.100] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.100] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.100] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.101] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0264.101] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.101] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.101] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2ae, lpOverlapped=0x0) returned 1 [0264.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2b0, lpOverlapped=0x0) returned 1 [0264.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.113] CloseHandle (hObject=0x1ec) returned 1 [0264.114] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.114] SetEndOfFile (hFile=0x1dc) returned 1 [0264.114] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0264.115] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0572132, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0572132, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0656ff9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cf4, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="office32mui.msi.16.en-us.tree.dat", cAlternateFileName="OF3D36~1.DAT")) returned 1 [0264.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.120] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.121] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.122] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.123] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0264.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0264.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0264.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0264.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.140] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0264.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0264.142] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.142] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcf4, lpOverlapped=0x0) returned 1 [0264.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff30c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd00, lpOverlapped=0x0) returned 1 [0264.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.146] CloseHandle (hObject=0x1ec) returned 1 [0264.146] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.146] SetEndOfFile (hFile=0x1dc) returned 1 [0264.146] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat.vhd")) returned 1 [0264.147] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b8fd, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="office32ww.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~4.DAT")) returned 1 [0264.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0264.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0264.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.171] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0264.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.172] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.172] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0264.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18fd, lpOverlapped=0x0) returned 1 [0264.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe703, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1900, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1900, lpOverlapped=0x0) returned 1 [0264.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.202] CloseHandle (hObject=0x1ec) returned 1 [0264.203] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.203] SetEndOfFile (hFile=0x1dc) returned 1 [0264.203] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0264.204] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0335ea1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x153aac, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="office32ww.msi.16.x-none.tree.dat", cAlternateFileName="OFDFB3~1.DAT")) returned 1 [0264.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.228] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0264.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0264.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.229] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.229] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0264.229] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.230] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.230] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0264.231] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.231] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.325] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1aac, lpOverlapped=0x0) returned 1 [0264.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe554, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ab0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ab0, lpOverlapped=0x0) returned 1 [0264.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.382] CloseHandle (hObject=0x1ec) returned 1 [0264.382] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.383] SetEndOfFile (hFile=0x1dc) returned 1 [0264.404] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat.vhd")) returned 1 [0264.405] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3334d, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="officemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~1.DAT")) returned 1 [0264.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0264.432] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0264.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.432] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0264.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0264.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.433] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0264.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.433] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.433] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0264.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x134d, lpOverlapped=0x0) returned 1 [0264.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffecb3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1350, lpOverlapped=0x0) returned 1 [0264.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.462] CloseHandle (hObject=0x1ec) returned 1 [0264.463] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.463] SetEndOfFile (hFile=0x1dc) returned 1 [0264.463] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0264.464] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd060ab93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36b17, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="officemui.msi.16.en-us.tree.dat", cAlternateFileName="OF3E9E~1.DAT")) returned 1 [0264.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0264.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0264.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.534] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ea8 [0264.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.534] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ea8 | out: hHeap=0x2830000) returned 1 [0264.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.535] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0264.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.535] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.535] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0264.540] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.540] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb17, lpOverlapped=0x0) returned 1 [0264.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4e9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb20, lpOverlapped=0x0) returned 1 [0264.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.559] CloseHandle (hObject=0x1ec) returned 1 [0264.559] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.559] SetEndOfFile (hFile=0x1dc) returned 1 [0264.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat.vhd")) returned 1 [0264.560] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="officemuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~3.DAT")) returned 1 [0264.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.584] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.585] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0264.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0264.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17da8 [0264.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17da8 | out: hHeap=0x2830000) returned 1 [0264.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.586] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0264.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.586] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.586] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0264.587] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd10, lpOverlapped=0x0) returned 1 [0264.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd10, lpOverlapped=0x0) returned 1 [0264.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.589] CloseHandle (hObject=0x1ec) returned 1 [0264.589] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.589] SetEndOfFile (hFile=0x1dc) returned 1 [0264.590] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0264.591] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd06c975a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="officemuiset.msi.16.en-us.tree.dat", cAlternateFileName="OFCB7C~1.DAT")) returned 1 [0264.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.595] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.596] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.597] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.598] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.599] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.600] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.601] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.602] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.603] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.604] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.605] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe19da0 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0264.609] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19f08 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0264.609] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.609] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19f08 | out: hHeap=0x2830000) returned 1 [0264.609] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19da0 [0264.609] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.609] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.609] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0264.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe19da0 [0264.610] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe19fb0 [0264.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19da0 | out: hHeap=0x2830000) returned 1 [0264.610] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fb0 | out: hHeap=0x2830000) returned 1 [0264.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0264.611] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0264.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0264.611] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x11e2, lpOverlapped=0x0) returned 1 [0264.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee1e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x11f0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x11f0, lpOverlapped=0x0) returned 1 [0264.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.612] CloseHandle (hObject=0x1ec) returned 1 [0264.612] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.612] SetEndOfFile (hFile=0x1dc) returned 1 [0264.612] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat.vhd")) returned 1 [0264.613] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11bd8, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="onenote.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ONENOT~2.DAT")) returned 1 [0264.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0264.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0264.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0264.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0264.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0264.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0264.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0264.629] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0264.629] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0264.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.629] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.630] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0264.631] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0264.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0264.631] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1bd8, lpOverlapped=0x0) returned 1 [0264.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe428, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1be0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1be0, lpOverlapped=0x0) returned 1 [0264.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.637] CloseHandle (hObject=0x1ec) returned 1 [0264.638] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.638] SetEndOfFile (hFile=0x1dc) returned 1 [0264.638] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0264.639] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0251012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c425, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="onenote.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ONENOT~3.DAT")) returned 1 [0264.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0264.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0264.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0264.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0264.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0264.657] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0264.657] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0264.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0264.658] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0264.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.658] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.658] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0264.659] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0264.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0264.659] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x425, lpOverlapped=0x0) returned 1 [0264.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbdb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x430, lpOverlapped=0x0) returned 1 [0264.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.668] CloseHandle (hObject=0x1ec) returned 1 [0264.668] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.668] SetEndOfFile (hFile=0x1dc) returned 1 [0264.669] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0264.670] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ba, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="onenotemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ONENOT~1.DAT")) returned 1 [0264.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0264.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0264.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0264.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e18 [0264.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0264.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e18 | out: hHeap=0x2830000) returned 1 [0264.687] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0264.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0264.687] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.687] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0264.687] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.687] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.687] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0264.688] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0264.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0264.688] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18ba, lpOverlapped=0x0) returned 1 [0264.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe746, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18c0, lpOverlapped=0x0) returned 1 [0264.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.691] CloseHandle (hObject=0x1ec) returned 1 [0264.691] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.691] SetEndOfFile (hFile=0x1dc) returned 1 [0264.691] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0264.693] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0572132, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="onenotemui.msi.16.en-us.tree.dat", cAlternateFileName="ONENOT~4.DAT")) returned 1 [0264.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.700] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0264.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0264.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0264.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0264.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0264.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0264.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0264.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0264.711] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0264.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0264.712] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0264.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0264.712] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x615, lpOverlapped=0x0) returned 1 [0264.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x620, lpOverlapped=0x0) returned 1 [0264.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.715] CloseHandle (hObject=0x1ec) returned 1 [0264.715] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.715] SetEndOfFile (hFile=0x1dc) returned 1 [0264.715] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat.vhd")) returned 1 [0264.716] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osm.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMX-N~1.DAT")) returned 1 [0264.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.724] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.725] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.726] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.727] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.728] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.734] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.734] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.734] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0264.734] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0264.734] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0264.734] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0264.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0264.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0264.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0264.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0264.735] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0264.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.735] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.735] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0264.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0264.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0264.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x136c, lpOverlapped=0x0) returned 1 [0264.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1370, lpOverlapped=0x0) returned 1 [0264.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.739] CloseHandle (hObject=0x1ec) returned 1 [0264.739] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.739] SetEndOfFile (hFile=0x1dc) returned 1 [0264.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0264.741] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd02e99f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osm.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMX-N~2.DAT")) returned 1 [0264.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.761] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.761] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.761] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0264.761] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0264.761] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0264.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0264.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0264.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0264.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0264.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0264.762] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0264.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.763] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0264.763] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0264.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0264.764] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x136c, lpOverlapped=0x0) returned 1 [0264.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec94, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1370, lpOverlapped=0x0) returned 1 [0264.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.765] CloseHandle (hObject=0x1ec) returned 1 [0264.766] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.766] SetEndOfFile (hFile=0x1dc) returned 1 [0264.766] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0264.767] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osmmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMMUI~1.DAT")) returned 1 [0264.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.789] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0264.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0264.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0264.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0264.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0264.790] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0264.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0264.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0264.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe59, lpOverlapped=0x0) returned 1 [0264.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1a7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe60, lpOverlapped=0x0) returned 1 [0264.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.793] CloseHandle (hObject=0x1ec) returned 1 [0264.793] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.793] SetEndOfFile (hFile=0x1dc) returned 1 [0264.797] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0264.841] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd089348e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x134e, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osmmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMMUI~2.DAT")) returned 1 [0264.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0264.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0264.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0264.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0264.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0264.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0264.862] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0264.862] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0264.863] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.863] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0264.863] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.863] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.863] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.863] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0264.865] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0264.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0264.865] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x134e, lpOverlapped=0x0) returned 1 [0264.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffecb2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1350, lpOverlapped=0x0) returned 1 [0264.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.868] CloseHandle (hObject=0x1ec) returned 1 [0264.868] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.868] SetEndOfFile (hFile=0x1dc) returned 1 [0264.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0264.869] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osmux.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMUXX~1.DAT")) returned 1 [0264.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.875] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.876] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.877] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.878] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.879] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0264.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0264.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0264.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ea8 [0264.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0264.955] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ea8 | out: hHeap=0x2830000) returned 1 [0264.955] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0264.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0264.956] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.956] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0264.956] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.956] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.956] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.957] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0264.957] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0264.957] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0264.957] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c5f, lpOverlapped=0x0) returned 1 [0264.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe3a1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1c60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1c60, lpOverlapped=0x0) returned 1 [0264.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.962] CloseHandle (hObject=0x1ec) returned 1 [0264.962] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.962] SetEndOfFile (hFile=0x1dc) returned 1 [0264.962] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0264.963] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfc813cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21cc, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osmux.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMUXX~2.DAT")) returned 1 [0264.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0264.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0264.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0264.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0264.985] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0264.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0264.986] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0264.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0264.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0264.986] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0264.986] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0264.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0264.987] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0264.987] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0264.988] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0264.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0264.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0264.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1cc, lpOverlapped=0x0) returned 1 [0264.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe34, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d0, lpOverlapped=0x0) returned 1 [0264.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0264.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0264.997] CloseHandle (hObject=0x1ec) returned 1 [0264.997] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.997] SetEndOfFile (hFile=0x1dc) returned 1 [0265.016] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0265.017] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa9, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osmuxmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMUXM~1.DAT")) returned 1 [0265.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.019] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.020] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.021] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.033] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0265.033] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0265.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0265.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0265.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0265.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0265.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0265.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0265.034] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0265.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.034] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.034] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.055] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0265.055] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0265.055] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0265.055] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1fa9, lpOverlapped=0x0) returned 1 [0265.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe057, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1fb0, lpOverlapped=0x0) returned 1 [0265.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.057] CloseHandle (hObject=0x1ec) returned 1 [0265.057] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.057] SetEndOfFile (hFile=0x1dc) returned 1 [0265.057] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0265.063] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd08df8b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x263d, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="osmuxmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMUXM~2.DAT")) returned 1 [0265.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.090] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.091] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.092] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0265.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ea8 [0265.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ea8 | out: hHeap=0x2830000) returned 1 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0265.095] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0265.095] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.095] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0265.096] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.096] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x63d, lpOverlapped=0x0) returned 1 [0265.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9c3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x640, lpOverlapped=0x0) returned 1 [0265.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.099] CloseHandle (hObject=0x1ec) returned 1 [0265.099] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.099] SetEndOfFile (hFile=0x1dc) returned 1 [0265.099] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0265.100] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cd75, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="outlook.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OUTLOO~1.DAT")) returned 1 [0265.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0265.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0265.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e18 [0265.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e18 | out: hHeap=0x2830000) returned 1 [0265.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.117] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0265.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.118] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0265.118] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0265.118] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0265.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd75, lpOverlapped=0x0) returned 1 [0265.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff28b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd80, lpOverlapped=0x0) returned 1 [0265.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.136] CloseHandle (hObject=0x1ec) returned 1 [0265.136] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.136] SetEndOfFile (hFile=0x1dc) returned 1 [0265.137] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0265.137] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfa915dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x913cb, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="outlook.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OUTLOO~3.DAT")) returned 1 [0265.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0265.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0265.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0265.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0265.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0265.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0265.155] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0265.155] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0265.155] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0265.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.156] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.156] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.157] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0265.157] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.157] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.157] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x13cb, lpOverlapped=0x0) returned 1 [0265.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffec35, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x13d0, lpOverlapped=0x0) returned 1 [0265.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.200] CloseHandle (hObject=0x1ec) returned 1 [0265.200] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.200] SetEndOfFile (hFile=0x1dc) returned 1 [0265.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0265.202] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa1, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="outlookmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OUTLOO~2.DAT")) returned 1 [0265.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.207] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.208] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.209] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.210] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0265.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0265.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0265.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0265.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0265.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0265.222] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0265.222] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0265.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.223] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.223] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.223] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0265.224] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0265.224] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0265.225] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xaa1, lpOverlapped=0x0) returned 1 [0265.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff55f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xab0, lpOverlapped=0x0) returned 1 [0265.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.231] CloseHandle (hObject=0x1ec) returned 1 [0265.231] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.232] SetEndOfFile (hFile=0x1dc) returned 1 [0265.232] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0265.233] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0715cb9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a50, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="outlookmui.msi.16.en-us.tree.dat", cAlternateFileName="OUTLOO~4.DAT")) returned 1 [0265.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.252] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.252] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.252] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0265.252] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0265.252] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0265.252] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ea8 [0265.253] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.253] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0265.253] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ea8 | out: hHeap=0x2830000) returned 1 [0265.253] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0265.253] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.253] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0265.253] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.253] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.253] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.253] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0265.256] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0265.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0265.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa50, lpOverlapped=0x0) returned 1 [0265.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa50, lpOverlapped=0x0) returned 1 [0265.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.264] CloseHandle (hObject=0x1ec) returned 1 [0265.265] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.265] SetEndOfFile (hFile=0x1dc) returned 1 [0265.265] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0265.266] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd5, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="powerpivot.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~1.DAT")) returned 1 [0265.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0265.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17de8 [0265.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0265.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17de8 | out: hHeap=0x2830000) returned 1 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0265.284] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0265.284] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.284] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.285] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0265.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xbd5, lpOverlapped=0x0) returned 1 [0265.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff42b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xbe0, lpOverlapped=0x0) returned 1 [0265.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.360] CloseHandle (hObject=0x1ec) returned 1 [0265.360] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.360] SetEndOfFile (hFile=0x1dc) returned 1 [0265.376] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0265.378] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcff7c3ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x81963, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="powerpivot.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POWERP~4.DAT")) returned 1 [0265.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0265.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0265.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0265.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0265.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0265.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0265.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0265.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0265.410] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0265.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0265.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0265.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0265.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1963, lpOverlapped=0x0) returned 1 [0265.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe69d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1970, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1970, lpOverlapped=0x0) returned 1 [0265.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.450] CloseHandle (hObject=0x1ec) returned 1 [0265.450] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.450] SetEndOfFile (hFile=0x1dc) returned 1 [0265.450] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0265.451] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ca6, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="powerpoint.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~3.DAT")) returned 1 [0265.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0265.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0265.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0265.491] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0265.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0265.491] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0265.492] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0265.492] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.492] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0265.492] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.492] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.492] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.492] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.494] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0265.494] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0265.494] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0265.494] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ca6, lpOverlapped=0x0) returned 1 [0265.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe35a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1cb0, lpOverlapped=0x0) returned 1 [0265.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.559] CloseHandle (hObject=0x1ec) returned 1 [0265.560] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.560] SetEndOfFile (hFile=0x1dc) returned 1 [0265.560] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0265.561] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd04b3616, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd04b3616, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd059845b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x59af4, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="powerpoint.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POA51D~1.DAT")) returned 1 [0265.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.579] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.582] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0265.582] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0265.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ee8 [0265.582] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.582] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.582] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ee8 | out: hHeap=0x2830000) returned 1 [0265.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0265.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0265.585] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0265.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.585] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.585] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0265.587] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0265.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0265.587] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.606] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.607] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.607] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.607] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.608] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.608] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.608] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.609] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.609] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.610] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.610] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.610] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.611] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.611] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.611] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.612] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.612] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1af4, lpOverlapped=0x0) returned 1 [0265.612] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe50c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1b00, lpOverlapped=0x0) returned 1 [0265.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.613] CloseHandle (hObject=0x1ec) returned 1 [0265.613] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.613] SetEndOfFile (hFile=0x1dc) returned 1 [0265.615] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x405c, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="powerpointmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="POWERP~2.DAT")) returned 1 [0265.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0265.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0265.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0265.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0265.637] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0265.637] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0265.638] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.638] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0265.638] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.638] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.638] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.638] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0265.640] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.640] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x5c, lpOverlapped=0x0) returned 1 [0265.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffa4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x60, lpOverlapped=0x0) returned 1 [0265.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.644] CloseHandle (hObject=0x1ec) returned 1 [0265.644] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.645] SetEndOfFile (hFile=0x1dc) returned 1 [0265.645] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0265.646] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd07ae4bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a23, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="powerpointmui.msi.16.en-us.tree.dat", cAlternateFileName="PO677D~1.DAT")) returned 1 [0265.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.686] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.687] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.688] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.689] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.690] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.691] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.692] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0265.692] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0265.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0265.692] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ee8 [0265.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0265.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ee8 | out: hHeap=0x2830000) returned 1 [0265.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0265.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0265.693] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0265.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.693] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.693] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0265.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0265.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0265.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa23, lpOverlapped=0x0) returned 1 [0265.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5dd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa30, lpOverlapped=0x0) returned 1 [0265.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.698] CloseHandle (hObject=0x1ec) returned 1 [0265.698] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.699] SetEndOfFile (hFile=0x1dc) returned 1 [0265.699] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0265.700] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x229c5, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="project.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PROJEC~1.DAT")) returned 1 [0265.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0265.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0265.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0265.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e18 [0265.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0265.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e18 | out: hHeap=0x2830000) returned 1 [0265.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.724] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0265.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.725] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0265.726] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0265.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0265.726] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x9c5, lpOverlapped=0x0) returned 1 [0265.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff63b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x9d0, lpOverlapped=0x0) returned 1 [0265.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.738] CloseHandle (hObject=0x1ec) returned 1 [0265.738] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.738] SetEndOfFile (hFile=0x1dc) returned 1 [0265.738] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0265.740] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b1a0d3d, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3a1db, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="project.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PROJEC~4.DAT")) returned 1 [0265.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.748] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.749] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.750] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.751] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.752] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.753] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.759] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0265.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e78 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e78 | out: hHeap=0x2830000) returned 1 [0265.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0265.760] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0265.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.760] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.760] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0265.762] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0265.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0265.762] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.767] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.777] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.778] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.778] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.778] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1db, lpOverlapped=0x0) returned 1 [0265.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffe25, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e0, lpOverlapped=0x0) returned 1 [0265.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.781] CloseHandle (hObject=0x1ec) returned 1 [0265.781] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.781] SetEndOfFile (hFile=0x1dc) returned 1 [0265.781] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0265.782] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9910b72, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="projectmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROJEC~2.DAT")) returned 1 [0265.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0265.803] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0265.803] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0265.827] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0265.827] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.827] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0265.827] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0265.827] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0265.827] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0265.828] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.828] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0265.828] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.828] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.829] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.829] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0265.830] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0265.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0265.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1fc8, lpOverlapped=0x0) returned 1 [0265.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe038, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1fd0, lpOverlapped=0x0) returned 1 [0265.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.834] CloseHandle (hObject=0x1ec) returned 1 [0265.834] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.834] SetEndOfFile (hFile=0x1dc) returned 1 [0265.844] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0265.845] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x76a0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="projectmui.msi.16.en-us.tree.dat", cAlternateFileName="PROJEC~3.DAT")) returned 1 [0265.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.872] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.873] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.874] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.874] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.874] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.874] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0265.874] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0265.874] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0265.874] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e58 [0265.874] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.874] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0265.874] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e58 | out: hHeap=0x2830000) returned 1 [0265.874] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0265.874] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0265.874] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.875] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0265.875] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.875] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.875] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.875] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.876] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0265.876] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.876] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.876] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16a0, lpOverlapped=0x0) returned 1 [0265.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe960, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x16a0, lpOverlapped=0x0) returned 1 [0265.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.892] CloseHandle (hObject=0x1ec) returned 1 [0265.892] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.892] SetEndOfFile (hFile=0x1dc) returned 1 [0265.910] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0265.911] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47f6, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proof.en-us.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFE~1.DAT")) returned 1 [0265.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0265.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0265.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0265.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0265.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0265.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0265.937] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0265.937] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0265.937] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0265.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0265.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0265.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0265.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x7f6, lpOverlapped=0x0) returned 1 [0265.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff80a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x800, lpOverlapped=0x0) returned 1 [0265.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.942] CloseHandle (hObject=0x1ec) returned 1 [0265.943] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.943] SetEndOfFile (hFile=0x1dc) returned 1 [0265.943] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0265.944] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0aa952a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a74, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proof.en-us.msi.16.en-us.tree.dat", cAlternateFileName="PROOFE~3.DAT")) returned 1 [0265.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0265.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e88 [0265.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0265.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e88 | out: hHeap=0x2830000) returned 1 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0265.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0265.964] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0265.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0265.966] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0265.966] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0265.966] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0265.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0265.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0265.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa74, lpOverlapped=0x0) returned 1 [0265.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff58c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa80, lpOverlapped=0x0) returned 1 [0265.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.970] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0265.970] CloseHandle (hObject=0x1ec) returned 1 [0265.971] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.971] SetEndOfFile (hFile=0x1dc) returned 1 [0265.971] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat.vhd")) returned 1 [0265.973] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f6a, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proof.es-es.msi.16.es-es.boot.tree.dat", cAlternateFileName="PROOFE~2.DAT")) returned 1 [0265.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0265.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0265.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0265.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0265.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0265.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0265.991] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0265.991] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0265.991] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0265.992] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0265.992] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0266.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0266.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0266.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf6a, lpOverlapped=0x0) returned 1 [0266.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff096, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf70, lpOverlapped=0x0) returned 1 [0266.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.011] CloseHandle (hObject=0x1ec) returned 1 [0266.011] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.011] SetEndOfFile (hFile=0x1dc) returned 1 [0266.011] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat.vhd")) returned 1 [0266.013] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f21c2b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5de7, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proof.es-es.msi.16.es-es.tree.dat", cAlternateFileName="PROOFE~4.DAT")) returned 1 [0266.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.018] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.022] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0266.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0266.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0266.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0266.035] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.035] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0266.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0266.036] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.036] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0266.036] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.036] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.036] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0266.038] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0266.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0266.038] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1de7, lpOverlapped=0x0) returned 1 [0266.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe219, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1df0, lpOverlapped=0x0) returned 1 [0266.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.057] CloseHandle (hObject=0x1ec) returned 1 [0266.058] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.058] SetEndOfFile (hFile=0x1dc) returned 1 [0266.058] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat.vhd")) returned 1 [0266.059] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f96, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proof.fr-fr.msi.16.fr-fr.boot.tree.dat", cAlternateFileName="PROOFF~1.DAT")) returned 1 [0266.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.080] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0266.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0266.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0266.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0266.081] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0266.081] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.081] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.082] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0266.083] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0266.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0266.083] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf96, lpOverlapped=0x0) returned 1 [0266.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff06a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfa0, lpOverlapped=0x0) returned 1 [0266.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.087] CloseHandle (hObject=0x1ec) returned 1 [0266.088] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.088] SetEndOfFile (hFile=0x1dc) returned 1 [0266.088] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.vhd")) returned 1 [0266.089] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09ea90c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e25, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proof.fr-fr.msi.16.fr-fr.tree.dat", cAlternateFileName="PROOFF~2.DAT")) returned 1 [0266.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.093] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.094] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.095] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.096] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.097] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.098] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.099] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.100] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.101] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.108] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.109] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0266.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0266.109] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0266.109] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0266.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0266.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0266.109] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0266.109] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0266.109] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.109] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0266.110] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.110] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.110] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.110] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0266.111] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0266.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0266.111] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e25, lpOverlapped=0x0) returned 1 [0266.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe1db, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e30, lpOverlapped=0x0) returned 1 [0266.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.116] CloseHandle (hObject=0x1ec) returned 1 [0266.116] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.116] SetEndOfFile (hFile=0x1dc) returned 1 [0266.117] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat.vhd")) returned 1 [0266.118] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcee, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proofing.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFI~1.DAT")) returned 1 [0266.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0266.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0266.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0266.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0266.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0266.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0266.141] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0266.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.141] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.141] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0266.143] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0266.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0266.143] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcee, lpOverlapped=0x0) returned 1 [0266.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff312, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcf0, lpOverlapped=0x0) returned 1 [0266.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.144] CloseHandle (hObject=0x1ec) returned 1 [0266.144] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.144] SetEndOfFile (hFile=0x1dc) returned 1 [0266.144] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0266.145] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0af5a16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="proofing.msi.16.en-us.tree.dat", cAlternateFileName="PROOFI~2.DAT")) returned 1 [0266.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.150] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.151] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.152] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.153] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.154] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.155] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.164] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.164] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.164] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0266.164] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0266.164] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0266.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0266.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0266.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0266.165] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0266.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.165] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.165] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0266.167] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0266.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0266.167] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x117c, lpOverlapped=0x0) returned 1 [0266.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffee84, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1180, lpOverlapped=0x0) returned 1 [0266.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.169] CloseHandle (hObject=0x1ec) returned 1 [0266.169] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.169] SetEndOfFile (hFile=0x1dc) returned 1 [0266.169] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat.vhd")) returned 1 [0266.170] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1851f, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="publisher.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PUBLIS~2.DAT")) returned 1 [0266.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0266.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0266.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0266.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17da8 [0266.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0266.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17da8 | out: hHeap=0x2830000) returned 1 [0266.201] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0266.201] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0266.202] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0266.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.203] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0266.203] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0266.203] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0266.203] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x51f, lpOverlapped=0x0) returned 1 [0266.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffae1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x520, lpOverlapped=0x0) returned 1 [0266.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.213] CloseHandle (hObject=0x1ec) returned 1 [0266.213] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.213] SetEndOfFile (hFile=0x1dc) returned 1 [0266.214] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0266.215] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd05e48fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x236f9, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="publisher.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PUBLIS~3.DAT")) returned 1 [0266.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.238] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0266.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0266.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0266.239] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0266.239] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0266.239] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.240] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.240] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0266.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0266.241] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0266.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x16f9, lpOverlapped=0x0) returned 1 [0266.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe907, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1700, lpOverlapped=0x0) returned 1 [0266.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.254] CloseHandle (hObject=0x1ec) returned 1 [0266.254] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.254] SetEndOfFile (hFile=0x1dc) returned 1 [0266.254] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0266.256] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="publishermui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PUBLIS~1.DAT")) returned 1 [0266.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0266.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0266.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0266.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0266.275] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.275] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0266.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0266.276] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0266.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.276] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.276] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.277] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0266.277] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0266.278] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0266.278] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x94b, lpOverlapped=0x0) returned 1 [0266.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff6b5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x950, lpOverlapped=0x0) returned 1 [0266.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.280] CloseHandle (hObject=0x1ec) returned 1 [0266.280] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.280] SetEndOfFile (hFile=0x1dc) returned 1 [0266.281] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0266.282] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b8e391, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b0f, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="publishermui.msi.16.en-us.tree.dat", cAlternateFileName="PUBLIS~4.DAT")) returned 1 [0266.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.301] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0266.301] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0266.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0266.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0266.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0266.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0266.302] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0266.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.302] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.302] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0266.303] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0266.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0266.303] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xb0f, lpOverlapped=0x0) returned 1 [0266.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff4f1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb10, lpOverlapped=0x0) returned 1 [0266.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.315] CloseHandle (hObject=0x1ec) returned 1 [0266.315] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.315] SetEndOfFile (hFile=0x1dc) returned 1 [0266.328] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat.vhd")) returned 1 [0266.329] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x387c3, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="visio.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="VISIOX~1.DAT")) returned 1 [0266.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.353] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.354] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.355] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.356] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.357] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.358] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.381] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0266.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0266.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0266.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0266.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0266.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0266.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0266.382] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0266.383] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0266.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0266.384] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0266.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0266.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x7c3, lpOverlapped=0x0) returned 1 [0266.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff83d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x7d0, lpOverlapped=0x0) returned 1 [0266.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.435] CloseHandle (hObject=0x1ec) returned 1 [0266.435] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.435] SetEndOfFile (hFile=0x1dc) returned 1 [0266.437] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0266.438] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x147a8a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x147a8a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x147a8a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x62499, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="visio.x-none.msi.16.x-none.tree.dat", cAlternateFileName="VISIOX~2.DAT")) returned 1 [0266.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0266.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0266.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0266.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0266.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0266.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0266.471] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0266.471] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0266.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.472] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.472] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0266.473] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0266.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0266.473] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x499, lpOverlapped=0x0) returned 1 [0266.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb67, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4a0, lpOverlapped=0x0) returned 1 [0266.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.517] CloseHandle (hObject=0x1ec) returned 1 [0266.517] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.517] SetEndOfFile (hFile=0x1dc) returned 1 [0266.518] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0266.518] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x98e08, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="visiomui.msi.16.en-us.boot.tree.dat", cAlternateFileName="VISIOM~1.DAT")) returned 1 [0266.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7de8 [0266.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7de8 | out: hHeap=0x2830000) returned 1 [0266.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0266.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17da8 [0266.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0266.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17da8 | out: hHeap=0x2830000) returned 1 [0266.567] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0266.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0266.567] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.567] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0266.567] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.567] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.568] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0266.568] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0266.568] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0266.568] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.613] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.613] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.613] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.614] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.614] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.624] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.624] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.683] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.683] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.683] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.690] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.693] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.693] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.693] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.694] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.694] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe08, lpOverlapped=0x0) returned 1 [0266.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe10, lpOverlapped=0x0) returned 1 [0266.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.697] CloseHandle (hObject=0x1ec) returned 1 [0266.697] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.697] SetEndOfFile (hFile=0x1dc) returned 1 [0266.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0266.702] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1159842, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x98fc4, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="visiomui.msi.16.en-us.tree.dat", cAlternateFileName="VISIOM~2.DAT")) returned 1 [0266.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.721] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.722] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.723] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0266.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0266.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0266.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0266.723] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0266.723] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0266.723] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.724] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0266.724] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0266.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0266.725] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.779] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.779] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.779] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.780] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.782] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.782] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.782] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.783] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.783] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.784] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.785] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.786] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.788] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xfc4, lpOverlapped=0x0) returned 1 [0266.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff03c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xfd0, lpOverlapped=0x0) returned 1 [0266.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.801] CloseHandle (hObject=0x1ec) returned 1 [0266.801] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.801] SetEndOfFile (hFile=0x1dc) returned 1 [0266.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat.vhd")) returned 1 [0266.802] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38343, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="word.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="WORDX-~1.DAT")) returned 1 [0266.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.847] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.848] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.849] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.850] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.854] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e48 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e48 | out: hHeap=0x2830000) returned 1 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0266.855] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0266.855] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0266.856] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0266.856] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0266.856] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0266.856] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0266.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.970] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0266.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0266.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x343, lpOverlapped=0x0) returned 1 [0266.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffcbd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x350, lpOverlapped=0x0) returned 1 [0266.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0266.976] CloseHandle (hObject=0x1ec) returned 1 [0266.976] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.976] SetEndOfFile (hFile=0x1dc) returned 1 [0266.977] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat.vhd")) returned 1 [0266.978] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd022ae04, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd022ae04, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03a857f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67519, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="word.x-none.msi.16.x-none.tree.dat", cAlternateFileName="WORDX-~2.DAT")) returned 1 [0266.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0266.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0266.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.996] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0266.999] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.000] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.001] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0267.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0267.001] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0267.001] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0267.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0267.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e58 [0267.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0267.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e58 | out: hHeap=0x2830000) returned 1 [0267.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0267.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0267.002] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0267.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0267.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0267.002] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0267.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.002] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0267.004] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0267.004] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0267.004] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0267.004] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0267.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1519, lpOverlapped=0x0) returned 1 [0267.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeae7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1520, lpOverlapped=0x0) returned 1 [0267.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0267.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0267.153] CloseHandle (hObject=0x1ec) returned 1 [0267.154] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.154] SetEndOfFile (hFile=0x1dc) returned 1 [0267.154] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat.vhd")) returned 1 [0267.155] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbd39, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="WORDMU~1.DAT")) returned 1 [0267.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0267.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0267.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0267.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0267.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0267.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0267.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0267.184] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0267.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0267.185] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0267.185] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.185] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0267.186] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0267.186] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0267.186] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0267.186] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0267.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1d39, lpOverlapped=0x0) returned 1 [0267.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe2c7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1d40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1d40, lpOverlapped=0x0) returned 1 [0267.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0267.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0267.220] CloseHandle (hObject=0x1ec) returned 1 [0267.220] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.220] SetEndOfFile (hFile=0x1dc) returned 1 [0267.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat.vhd")) returned 1 [0267.221] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 1 [0267.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0267.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0267.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.250] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0267.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0267.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0267.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0267.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0267.254] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0267.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.254] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0267.255] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0267.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0267.255] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0267.255] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0267.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0267.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0267.255] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0267.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.256] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0267.257] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0267.257] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0267.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0267.258] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0267.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0267.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0267.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2, lpOverlapped=0x0) returned 1 [0267.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffffe, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10, lpOverlapped=0x0) returned 1 [0267.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0267.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0267.312] CloseHandle (hObject=0x1ec) returned 1 [0267.312] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.312] SetEndOfFile (hFile=0x1dc) returned 1 [0267.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat.vhd" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat.vhd")) returned 1 [0267.313] FindNextFileW (in: hFindFile=0xd24458, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 0 [0267.313] FindClose (in: hFindFile=0xd24458 | out: hFindFile=0xd24458) returned 1 [0267.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*.*", lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xd24098 [0267.314] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.958] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17ee8 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0xdeca88 [0267.958] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e18 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0xdecbf0 [0267.958] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17da8 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6a) returned 0xdec740 [0267.958] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f78 [0267.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x74) returned 0xe011c0 [0267.958] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0267.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0267.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0267.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.982] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0267.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0267.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0267.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0267.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0267.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0267.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0267.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0267.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0267.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0267.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0267.994] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0267.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0267.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0267.994] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0267.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0267.994] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0267.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0267.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0267.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0267.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0267.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.836] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.859] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.859] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.860] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.860] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.860] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.900] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.900] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.900] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.901] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.901] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.901] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.954] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.970] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0268.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0268.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.164] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.164] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.532] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.532] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a40, lpOverlapped=0x0) returned 1 [0269.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe5c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.713] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a40, lpOverlapped=0x0) returned 1 [0269.713] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0269.714] CloseHandle (hObject=0x1ec) returned 1 [0269.714] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.714] SetEndOfFile (hFile=0x1dc) returned 1 [0269.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe.vhd")) returned 1 [0269.816] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0269.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17ea8 [0269.816] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6e) returned 0xdec8a8 [0269.816] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0269.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0269.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.846] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0269.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0269.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0269.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0269.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0269.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0269.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0269.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0269.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0269.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0269.847] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0269.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0269.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0269.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0269.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0269.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0269.848] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0269.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0269.848] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0269.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.864] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.864] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.864] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1860, lpOverlapped=0x0) returned 1 [0269.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe7a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1860, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1860, lpOverlapped=0x0) returned 1 [0269.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0269.876] CloseHandle (hObject=0x1ec) returned 1 [0269.876] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.876] SetEndOfFile (hFile=0x1dc) returned 1 [0269.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz.dll.vhd")) returned 1 [0269.878] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe107a061, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe15188c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91aa0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0269.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\acedao.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0269.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.880] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0269.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0269.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0269.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0269.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0269.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0269.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0269.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0269.895] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0269.895] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0269.895] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0269.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0269.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0269.896] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0269.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.896] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0269.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0269.897] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0269.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0269.897] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0269.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.902] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.903] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.903] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.904] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1aa0, lpOverlapped=0x0) returned 1 [0269.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe560, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1aa0, lpOverlapped=0x0) returned 1 [0269.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0269.932] CloseHandle (hObject=0x1ec) returned 1 [0269.932] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.932] SetEndOfFile (hFile=0x1dc) returned 1 [0269.932] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACEDAO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\acedao.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACEDAO.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\acedao.dll.vhd")) returned 1 [0269.933] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0269.933] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e78 [0269.933] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6e) returned 0xdecb00 [0269.933] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1 [0269.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AdeModule.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ademodule.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0269.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.939] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0269.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0269.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0269.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0269.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0269.950] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0269.950] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0269.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0269.951] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0269.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0269.951] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0269.951] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0269.951] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0269.951] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0269.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.951] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0269.952] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0269.952] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0269.952] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0269.952] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0269.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.955] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.955] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.955] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.956] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.956] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.956] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.957] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.959] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.959] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.959] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.960] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0269.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0269.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1680, lpOverlapped=0x0) returned 1 [0269.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe980, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1680, lpOverlapped=0x0) returned 1 [0269.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0269.961] CloseHandle (hObject=0x1ec) returned 1 [0269.961] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.961] SetEndOfFile (hFile=0x1dc) returned 1 [0269.962] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AdeModule.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ademodule.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AdeModule.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ademodule.dll.vhd")) returned 1 [0269.962] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15fec0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0269.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AEC.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\aec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0269.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0269.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.974] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.975] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.976] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.977] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.978] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.979] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.980] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.981] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0269.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0269.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0269.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0269.981] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0269.981] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0269.981] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0269.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0269.982] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0269.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0269.982] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0269.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0269.983] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0269.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0269.983] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0269.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.136] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.136] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.156] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.156] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.156] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec0, lpOverlapped=0x0) returned 1 [0270.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe140, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ec0, lpOverlapped=0x0) returned 1 [0270.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.159] CloseHandle (hObject=0x1ec) returned 1 [0270.159] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.159] SetEndOfFile (hFile=0x1dc) returned 1 [0270.160] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AEC.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\aec.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AEC.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\aec.dll.vhd")) returned 1 [0270.161] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbd4d0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0270.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AECUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\aecutils.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0270.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0270.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0270.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0270.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0270.178] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0270.178] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0270.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0270.181] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0270.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.181] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.181] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.182] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0270.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0270.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0270.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.214] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14d0, lpOverlapped=0x0) returned 1 [0270.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14d0, lpOverlapped=0x0) returned 1 [0270.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.224] CloseHandle (hObject=0x1ec) returned 1 [0270.224] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.224] SetEndOfFile (hFile=0x1dc) returned 1 [0270.225] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AECUTILS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\aecutils.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AECUTILS.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\aecutils.dll.vhd")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83189ec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0270.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.243] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0270.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0270.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0270.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0270.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0270.244] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0270.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0270.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0270.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0270.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0270.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.249] CloseHandle (hObject=0x1ec) returned 1 [0270.250] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.250] SetEndOfFile (hFile=0x1dc) returned 1 [0270.250] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l1-2-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l1-2-0.dll.vhd")) returned 1 [0270.251] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0270.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.266] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0270.266] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0270.267] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0270.267] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e88 [0270.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0270.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e88 | out: hHeap=0x2830000) returned 1 [0270.267] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0270.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.267] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0270.267] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.267] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.267] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0270.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0270.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0270.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0270.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0270.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.302] CloseHandle (hObject=0x1ec) returned 1 [0270.302] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.302] SetEndOfFile (hFile=0x1dc) returned 1 [0270.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l2-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l2-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-file-l2-1-0.dll.vhd")) returned 1 [0270.303] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0270.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0270.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0270.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0270.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0270.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0270.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0270.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0270.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0270.324] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0270.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.325] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.325] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0270.326] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0270.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0270.326] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.328] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.328] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.329] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.329] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c0, lpOverlapped=0x0) returned 1 [0270.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12c0, lpOverlapped=0x0) returned 1 [0270.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.330] CloseHandle (hObject=0x1ec) returned 1 [0270.331] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.331] SetEndOfFile (hFile=0x1dc) returned 1 [0270.331] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-localization-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-localization-l1-2-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-localization-l1-2-0.dll.vhd")) returned 1 [0270.332] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831fc5e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831fc5e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0270.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.348] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0270.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0270.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e68 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e68 | out: hHeap=0x2830000) returned 1 [0270.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0270.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.349] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.349] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0270.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0270.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0270.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0270.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0270.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.355] CloseHandle (hObject=0x1ec) returned 1 [0270.355] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.355] SetEndOfFile (hFile=0x1dc) returned 1 [0270.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-processthreads-l1-1-1.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-processthreads-l1-1-1.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-processthreads-l1-1-1.dll.vhd")) returned 1 [0270.356] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0270.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.359] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.360] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.361] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.362] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.363] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.364] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.365] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.366] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.368] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.369] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.370] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.371] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.372] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.373] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.373] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.373] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.373] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7448 [0270.373] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7448 | out: hHeap=0x2830000) returned 1 [0270.373] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0270.373] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0270.373] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.373] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0270.373] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0270.373] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0270.373] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0270.374] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.374] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde69e0 [0270.374] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.374] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.374] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.374] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.375] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde69e0 | out: hHeap=0x2830000) returned 1 [0270.375] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0270.375] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0270.375] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0270.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0270.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.379] CloseHandle (hObject=0x1ec) returned 1 [0270.379] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.379] SetEndOfFile (hFile=0x1dc) returned 1 [0270.380] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-synch-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-synch-l1-2-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-synch-l1-2-0.dll.vhd")) returned 1 [0270.381] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0270.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0270.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0270.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0270.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0270.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0270.410] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0270.411] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.411] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.411] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.411] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0270.412] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0270.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0270.412] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0270.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0270.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.416] CloseHandle (hObject=0x1ec) returned 1 [0270.416] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.416] SetEndOfFile (hFile=0x1dc) returned 1 [0270.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-timezone-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-timezone-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-timezone-l1-1-0.dll.vhd")) returned 1 [0270.417] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83189ec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0270.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.435] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0270.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0270.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0270.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0270.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0270.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0270.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0270.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0270.436] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0270.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.436] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.436] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0270.437] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0270.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0270.437] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xd60, lpOverlapped=0x0) returned 1 [0270.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff2a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd60, lpOverlapped=0x0) returned 1 [0270.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.439] CloseHandle (hObject=0x1ec) returned 1 [0270.439] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.439] SetEndOfFile (hFile=0x1dc) returned 1 [0270.440] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-xstate-l2-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-xstate-l2-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-core-xstate-l2-1-0.dll.vhd")) returned 1 [0270.441] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0270.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.445] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.446] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.447] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.448] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.449] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.450] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.451] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.452] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0270.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0270.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0270.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0270.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0270.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0270.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0270.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0270.461] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0270.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0270.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0270.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0270.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0270.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0270.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.467] CloseHandle (hObject=0x1ec) returned 1 [0270.467] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.467] SetEndOfFile (hFile=0x1dc) returned 1 [0270.467] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-conio-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-conio-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-conio-l1-1-0.dll.vhd")) returned 1 [0270.468] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0270.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.477] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.478] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.479] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.480] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.481] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.485] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.486] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.486] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0270.487] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0270.487] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.487] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0270.487] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0270.487] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0270.487] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.487] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.488] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.488] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0270.489] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0270.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0270.489] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18c0, lpOverlapped=0x0) returned 1 [0270.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18c0, lpOverlapped=0x0) returned 1 [0270.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.494] CloseHandle (hObject=0x1ec) returned 1 [0270.494] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.494] SetEndOfFile (hFile=0x1dc) returned 1 [0270.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-convert-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-convert-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-convert-l1-1-0.dll.vhd")) returned 1 [0270.495] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0270.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.500] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.501] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.502] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.503] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.504] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.505] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.506] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.507] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.508] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.509] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.510] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.511] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.512] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.513] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.513] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0270.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0270.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0270.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0270.514] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0270.514] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.514] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.515] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.515] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.516] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0270.516] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0270.516] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0270.516] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0270.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0270.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.519] CloseHandle (hObject=0x1ec) returned 1 [0270.519] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.520] SetEndOfFile (hFile=0x1dc) returned 1 [0270.520] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-environment-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-environment-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-environment-l1-1-0.dll.vhd")) returned 1 [0270.521] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0270.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.524] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.525] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.526] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.527] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.580] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.581] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0270.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0270.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0270.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0270.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0270.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0270.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0270.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0270.582] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0270.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.582] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.582] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.582] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.583] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0270.583] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0270.583] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0270.583] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x10c0, lpOverlapped=0x0) returned 1 [0270.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x10c0, lpOverlapped=0x0) returned 1 [0270.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.619] CloseHandle (hObject=0x1ec) returned 1 [0270.620] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.620] SetEndOfFile (hFile=0x1dc) returned 1 [0270.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-filesystem-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-filesystem-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-filesystem-l1-1-0.dll.vhd")) returned 1 [0270.621] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0270.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.626] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.627] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0270.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0270.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0270.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0270.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0270.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0270.642] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0270.642] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0270.643] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0270.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.643] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.643] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0270.644] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0270.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0270.644] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0270.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0270.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.648] CloseHandle (hObject=0x1ec) returned 1 [0270.648] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.648] SetEndOfFile (hFile=0x1dc) returned 1 [0270.648] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-heap-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-heap-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-heap-l1-1-0.dll.vhd")) returned 1 [0270.650] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0270.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.678] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0270.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0270.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0270.683] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0270.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0270.683] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0270.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0270.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0270.684] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0270.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.684] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.684] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.685] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0270.686] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0270.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0270.686] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0270.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0270.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.689] CloseHandle (hObject=0x1ec) returned 1 [0270.690] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.690] SetEndOfFile (hFile=0x1dc) returned 1 [0270.690] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-locale-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-locale-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-locale-l1-1-0.dll.vhd")) returned 1 [0270.691] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0270.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.695] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.696] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.697] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.698] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.699] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.701] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0270.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0270.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0270.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0270.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0270.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0270.709] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0270.709] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0270.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.710] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.710] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0270.711] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0270.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0270.711] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0270.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0270.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.719] CloseHandle (hObject=0x1ec) returned 1 [0270.719] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.719] SetEndOfFile (hFile=0x1dc) returned 1 [0270.720] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-math-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-math-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-math-l1-1-0.dll.vhd")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0270.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.721] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.734] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.735] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.736] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.737] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.738] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.739] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.740] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.741] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.742] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.743] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.744] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.745] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.746] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0270.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0270.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0270.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0270.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0270.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0270.746] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0270.746] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0270.747] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0270.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.747] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.747] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0270.748] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0270.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0270.748] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x8c0, lpOverlapped=0x0) returned 1 [0270.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x8c0, lpOverlapped=0x0) returned 1 [0270.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.781] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.782] CloseHandle (hObject=0x1ec) returned 1 [0270.782] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.782] SetEndOfFile (hFile=0x1dc) returned 1 [0270.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-multibyte-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-multibyte-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-multibyte-l1-1-0.dll.vhd")) returned 1 [0270.802] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0270.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.829] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.829] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.829] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0270.829] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0270.829] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0270.829] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e88 [0270.829] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0270.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e88 | out: hHeap=0x2830000) returned 1 [0270.830] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0270.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0270.830] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.830] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0270.830] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.830] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.830] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0270.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0270.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0270.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.880] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.881] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.881] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.882] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.882] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.882] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0270.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0270.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14c0, lpOverlapped=0x0) returned 1 [0270.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14c0, lpOverlapped=0x0) returned 1 [0270.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.903] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0270.904] CloseHandle (hObject=0x1ec) returned 1 [0270.904] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.904] SetEndOfFile (hFile=0x1dc) returned 1 [0270.904] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-private-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-private-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-private-l1-1-0.dll.vhd")) returned 1 [0270.905] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0270.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0270.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0270.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.972] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.973] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0270.992] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0270.992] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0270.992] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0270.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0270.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0270.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0270.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0270.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0270.993] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0270.993] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0270.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0270.995] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0270.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0270.995] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0270.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0271.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0271.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0271.015] CloseHandle (hObject=0x1ec) returned 1 [0271.015] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.015] SetEndOfFile (hFile=0x1dc) returned 1 [0271.015] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-process-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-process-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-process-l1-1-0.dll.vhd")) returned 1 [0271.017] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0271.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0271.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.028] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.034] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.035] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.036] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0271.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0271.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0271.059] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0271.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0271.059] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0271.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0271.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0271.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0271.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0271.060] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0271.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0271.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0271.060] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0271.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.060] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0271.061] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0271.061] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0271.061] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0271.062] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0271.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ac0, lpOverlapped=0x0) returned 1 [0271.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ac0, lpOverlapped=0x0) returned 1 [0271.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0271.186] CloseHandle (hObject=0x1ec) returned 1 [0271.186] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.186] SetEndOfFile (hFile=0x1dc) returned 1 [0271.186] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-runtime-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-runtime-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-runtime-l1-1-0.dll.vhd")) returned 1 [0271.187] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0271.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0271.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.279] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0271.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0271.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0271.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0271.280] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0271.280] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0271.280] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0271.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.281] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0271.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0271.282] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0271.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0271.282] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0271.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc0, lpOverlapped=0x0) returned 1 [0271.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc0, lpOverlapped=0x0) returned 1 [0271.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0271.484] CloseHandle (hObject=0x1ec) returned 1 [0271.484] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.484] SetEndOfFile (hFile=0x1dc) returned 1 [0271.485] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-stdio-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-stdio-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-stdio-l1-1-0.dll.vhd")) returned 1 [0271.486] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8383e900, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0271.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0271.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.606] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.607] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.608] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0271.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0271.623] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0271.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0271.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0271.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0271.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0271.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0271.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0271.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0271.624] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0271.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6da0 [0271.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0271.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0271.624] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0271.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6da0 | out: hHeap=0x2830000) returned 1 [0271.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0271.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0271.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0271.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc0, lpOverlapped=0x0) returned 1 [0271.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc0, lpOverlapped=0x0) returned 1 [0271.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0271.697] CloseHandle (hObject=0x1ec) returned 1 [0271.697] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.697] SetEndOfFile (hFile=0x1dc) returned 1 [0271.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-string-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-string-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-string-l1-1-0.dll.vhd")) returned 1 [0271.699] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0271.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0271.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.720] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0271.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0271.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d90 [0271.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d90 | out: hHeap=0x2830000) returned 1 [0271.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0271.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0271.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0271.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0271.720] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0271.720] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0271.721] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0271.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0271.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0271.721] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0271.721] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.721] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0271.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0271.722] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0271.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0271.722] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0271.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x12c0, lpOverlapped=0x0) returned 1 [0271.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffed40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x12c0, lpOverlapped=0x0) returned 1 [0271.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0271.727] CloseHandle (hObject=0x1ec) returned 1 [0271.728] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.728] SetEndOfFile (hFile=0x1dc) returned 1 [0271.728] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-time-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-time-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-time-l1-1-0.dll.vhd")) returned 1 [0271.729] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0271.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0271.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0271.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0271.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0271.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0271.790] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0271.790] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0271.790] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0271.791] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0271.791] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0271.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.791] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0271.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0271.792] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0271.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0271.792] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0271.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xac0, lpOverlapped=0x0) returned 1 [0271.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xac0, lpOverlapped=0x0) returned 1 [0271.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0271.892] CloseHandle (hObject=0x1ec) returned 1 [0271.893] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.893] SetEndOfFile (hFile=0x1dc) returned 1 [0271.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-utility-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-utility-l1-1-0.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\api-ms-win-crt-utility-l1-1-0.dll.vhd")) returned 1 [0271.895] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c530, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="Appshapi.dll", cAlternateFileName="")) returned 1 [0271.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Appshapi.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0271.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0271.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.909] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.910] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.911] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.912] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.913] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.913] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.913] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.913] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.914] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.914] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.915] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.916] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.917] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.918] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.919] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.920] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0271.927] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0271.927] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0271.927] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0271.927] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0271.927] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0271.927] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0271.927] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.927] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0271.927] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0271.927] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0271.927] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0271.927] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0271.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0271.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0271.928] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0271.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0271.928] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0271.929] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0271.929] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0271.929] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0271.929] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0271.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.951] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.951] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.953] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.953] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.953] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.954] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.954] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.970] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0271.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.297] CloseHandle (hObject=0x1ec) returned 1 [0272.297] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.297] SetEndOfFile (hFile=0x1dc) returned 1 [0272.297] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Appshapi.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshapi.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Appshapi.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshapi.dll.vhd")) returned 1 [0272.298] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e48, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="AppSharingChromeHook64.dll", cAlternateFileName="APPSHA~2.DLL")) returned 1 [0272.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingChromeHook64.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharingchromehook64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0272.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.367] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.426] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0272.426] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0272.426] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0272.426] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0272.426] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0272.426] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0272.426] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0272.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0272.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0272.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0272.427] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0272.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0272.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0272.427] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0272.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.427] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0272.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0272.428] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0272.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0272.428] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0272.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e48, lpOverlapped=0x0) returned 1 [0272.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe1b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e50, lpOverlapped=0x0) returned 1 [0272.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0272.435] CloseHandle (hObject=0x1ec) returned 1 [0272.435] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.435] SetEndOfFile (hFile=0x1dc) returned 1 [0272.435] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingChromeHook64.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharingchromehook64.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingChromeHook64.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharingchromehook64.dll.vhd")) returned 1 [0272.436] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf77004f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa048, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="AppSharingHookController64.exe", cAlternateFileName="APPSHA~1.EXE")) returned 1 [0272.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0272.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.543] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.544] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.545] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.546] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.547] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.548] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.549] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0272.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0272.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0272.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0272.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0272.560] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0272.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.560] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0272.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0272.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0272.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0272.561] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0272.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0272.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0272.561] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0272.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.561] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0272.562] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0272.562] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0272.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0272.563] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0272.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x48, lpOverlapped=0x0) returned 1 [0272.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffffb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x50, lpOverlapped=0x0) returned 1 [0272.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0272.570] CloseHandle (hObject=0x1ec) returned 1 [0272.571] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.571] SetEndOfFile (hFile=0x1dc) returned 1 [0272.571] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe.vhd")) returned 1 [0272.573] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7c11d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25048, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="appsharingmediaprovider.dll", cAlternateFileName="APPSHA~1.DLL")) returned 1 [0272.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appsharingmediaprovider.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharingmediaprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0272.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.670] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.671] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.672] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.673] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0272.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0272.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0272.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0272.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0272.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0272.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0272.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0272.673] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0272.673] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0272.674] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0272.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0272.674] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0272.694] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0272.694] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.694] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0272.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0272.695] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0272.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0272.695] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0272.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.713] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.721] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1048, lpOverlapped=0x0) returned 1 [0272.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffefb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1050, lpOverlapped=0x0) returned 1 [0272.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0272.823] CloseHandle (hObject=0x1ec) returned 1 [0272.824] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.824] SetEndOfFile (hFile=0x1dc) returned 1 [0272.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appsharingmediaprovider.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharingmediaprovider.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appsharingmediaprovider.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharingmediaprovider.dll.vhd")) returned 1 [0272.854] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1688e076, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57730, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="appshcom.dll", cAlternateFileName="")) returned 1 [0272.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshcom.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0272.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0272.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.952] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.953] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0272.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0272.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0272.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0272.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0272.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0272.964] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e88 [0272.964] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0272.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e88 | out: hHeap=0x2830000) returned 1 [0272.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0272.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0272.965] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0272.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0272.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0272.965] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0272.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0272.965] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0272.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0272.967] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0272.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0272.967] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0272.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0272.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0272.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1730, lpOverlapped=0x0) returned 1 [0273.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe8d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1730, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1730, lpOverlapped=0x0) returned 1 [0273.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0273.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0273.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0273.002] CloseHandle (hObject=0x1ec) returned 1 [0273.002] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0273.002] SetEndOfFile (hFile=0x1dc) returned 1 [0273.003] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshcom.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshcom.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshcom.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshcom.dll.vhd")) returned 1 [0273.005] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x341130, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="appshvw.dll", cAlternateFileName="")) returned 1 [0273.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshvw.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshvw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0273.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0273.008] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.009] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.010] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.011] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.012] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.013] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.014] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.015] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.016] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.017] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.029] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.030] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.031] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.032] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.033] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.037] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.038] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.039] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.040] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.041] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.042] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0273.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0273.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0273.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0273.042] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0273.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0273.042] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0273.042] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0273.042] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0273.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0273.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0273.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0273.043] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0273.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0273.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0273.043] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0273.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0273.043] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0273.044] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0273.044] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0273.044] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0273.045] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0273.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0273.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.117] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.117] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.122] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.122] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.125] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.125] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.126] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.127] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.151] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.151] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.151] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.152] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.152] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.152] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.155] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.155] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.155] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.157] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.157] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.157] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.158] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.159] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.159] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.159] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.160] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.160] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.160] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.162] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.163] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.164] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0273.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.547] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.547] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1130, lpOverlapped=0x0) returned 1 [0274.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeed0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1130, lpOverlapped=0x0) returned 1 [0274.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0274.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0274.556] CloseHandle (hObject=0x1ec) returned 1 [0274.556] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.556] SetEndOfFile (hFile=0x1dc) returned 1 [0274.557] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshvw.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshvw.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshvw.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appshvw.dll.vhd")) returned 1 [0274.558] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0274.558] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0274.558] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa98, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1 [0274.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHLTS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchlts.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0274.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0274.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.566] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.567] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.568] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.569] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.570] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.571] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.572] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.573] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.574] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.575] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.576] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.577] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.578] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0274.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0274.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0274.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0274.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0274.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0274.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0274.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0274.578] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0274.578] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0274.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0274.579] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0274.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0274.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0274.579] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0274.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0274.579] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0274.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0274.581] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0274.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0274.581] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0274.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a98, lpOverlapped=0x0) returned 1 [0274.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe568, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1aa0, lpOverlapped=0x0) returned 1 [0274.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0274.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0274.603] CloseHandle (hObject=0x1ec) returned 1 [0274.603] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.603] SetEndOfFile (hFile=0x1dc) returned 1 [0274.603] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHLTS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchlts.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHLTS.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchlts.dll.vhd")) returned 1 [0274.604] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1 [0274.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchmain.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0274.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0274.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.609] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.610] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0274.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0274.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0274.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0274.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0274.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0274.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0274.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0274.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0274.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0274.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0274.626] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0274.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0274.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0274.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0274.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0274.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0274.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0274.628] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0274.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0274.628] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0274.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.679] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.679] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.679] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.680] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.680] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.680] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.681] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.681] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.681] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.682] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.682] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.682] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.684] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.684] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.684] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.685] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.685] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.685] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.686] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.686] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.686] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.687] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.687] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.687] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.688] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.688] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.688] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.689] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.689] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.689] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.690] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.690] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.691] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.691] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.691] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.692] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.692] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.692] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.695] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.695] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.695] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.696] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.696] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.696] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.697] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.697] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.697] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.702] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.702] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.714] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.714] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.714] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.715] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.715] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.715] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.716] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.716] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.716] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.717] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.717] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.717] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.718] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.718] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.718] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.719] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.719] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.719] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.720] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.720] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.720] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.761] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.761] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.761] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.762] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.763] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.764] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.764] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.764] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.765] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.765] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.765] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.766] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.766] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.766] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.767] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.767] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.768] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.769] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.770] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.771] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.772] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.772] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.772] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.773] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.773] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.773] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.774] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.774] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.774] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.775] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.775] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.775] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.776] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x860, lpOverlapped=0x0) returned 1 [0274.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff7a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x860, lpOverlapped=0x0) returned 1 [0274.777] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0274.777] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0274.777] CloseHandle (hObject=0x1ec) returned 1 [0274.777] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.777] SetEndOfFile (hFile=0x1dc) returned 1 [0274.779] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHMAIN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchmain.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHMAIN.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchmain.dll.vhd")) returned 1 [0274.780] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x223c78, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1 [0274.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHSAPIFE.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchsapife.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0274.781] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.781] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0274.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.787] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.788] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.789] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.790] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.791] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.795] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.796] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.797] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.798] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.799] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.800] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0274.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0274.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0274.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0274.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0274.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0274.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e58 [0274.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0274.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0274.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e58 | out: hHeap=0x2830000) returned 1 [0274.800] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0274.800] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0274.800] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0274.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0274.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0274.801] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0274.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0274.801] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0274.802] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0274.802] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0274.802] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0274.802] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0274.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.818] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.818] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.818] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.819] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.819] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.819] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.820] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.820] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.820] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.822] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.823] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.824] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.824] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.824] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.825] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.825] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.825] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.826] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.827] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.829] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.829] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.829] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.830] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.830] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.830] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.831] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.831] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.831] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.851] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.851] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.857] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.857] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.858] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.858] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.858] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.859] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.943] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.943] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.963] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.970] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.970] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.970] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0274.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0274.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.068] CloseHandle (hObject=0x1ec) returned 1 [0275.069] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.069] SetEndOfFile (hFile=0x1dc) returned 1 [0275.070] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHSAPIFE.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchsapife.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHSAPIFE.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\audiosearchsapife.dll.vhd")) returned 1 [0275.071] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AutoHelper.dll", cAlternateFileName="AUTOHE~1.DLL")) returned 1 [0275.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AutoHelper.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\autohelper.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0275.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.089] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0275.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0275.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0275.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0275.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0275.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f48 [0275.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0275.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f48 | out: hHeap=0x2830000) returned 1 [0275.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0275.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0275.090] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0275.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0275.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0275.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0275.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0275.091] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0275.091] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0275.091] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0275.091] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0275.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa8, lpOverlapped=0x0) returned 1 [0275.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xb0, lpOverlapped=0x0) returned 1 [0275.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0275.098] CloseHandle (hObject=0x1ec) returned 1 [0275.098] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.098] SetEndOfFile (hFile=0x1dc) returned 1 [0275.099] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AutoHelper.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\autohelper.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AutoHelper.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\autohelper.dll.vhd")) returned 1 [0275.099] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66bc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1 [0275.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0275.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.102] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.103] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.104] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.105] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0275.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e48 [0275.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0275.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e48 | out: hHeap=0x2830000) returned 1 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0275.116] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0275.116] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0275.116] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0275.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0275.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0275.117] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0275.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0275.117] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0275.117] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.118] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x6bc, lpOverlapped=0x0) returned 1 [0275.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff944, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6c0, lpOverlapped=0x0) returned 1 [0275.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0275.121] CloseHandle (hObject=0x1ec) returned 1 [0275.122] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.122] SetEndOfFile (hFile=0x1dc) returned 1 [0275.122] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd.vhd")) returned 1 [0275.123] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1 [0275.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0275.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.138] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe19c28 [0275.138] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1ada8 [0275.138] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0275.138] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0275.138] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0275.138] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17ec8 [0275.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0275.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17ec8 | out: hHeap=0x2830000) returned 1 [0275.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0275.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0275.139] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0275.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0275.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1ada8 [0275.139] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1afb8 [0275.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.139] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afb8 | out: hHeap=0x2830000) returned 1 [0275.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0275.140] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0275.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0275.140] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19c28 | out: hHeap=0x2830000) returned 1 [0275.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.163] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1321, lpOverlapped=0x0) returned 1 [0275.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffecdf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1330, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1330, lpOverlapped=0x0) returned 1 [0275.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0275.174] CloseHandle (hObject=0x1ec) returned 1 [0275.176] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.176] SetEndOfFile (hFile=0x1dc) returned 1 [0275.176] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd.vhd")) returned 1 [0275.181] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0275.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17ec8 [0275.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7a) returned 0xe19c28 [0275.183] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0275.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f48 [0275.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdec650 [0275.183] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0275.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BSTORM.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bstorm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0275.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0275.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0275.241] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0275.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0275.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0275.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e68 [0275.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0275.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0275.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e68 | out: hHeap=0x2830000) returned 1 [0275.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0275.242] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0275.242] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0275.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0275.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0275.242] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0275.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0275.243] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0275.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0275.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0275.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0275.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1e60, lpOverlapped=0x0) returned 1 [0275.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe1a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1e60, lpOverlapped=0x0) returned 1 [0275.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0275.310] CloseHandle (hObject=0x1ec) returned 1 [0275.311] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.311] SetEndOfFile (hFile=0x1dc) returned 1 [0275.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BSTORM.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bstorm.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BSTORM.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bstorm.dll.vhd")) returned 1 [0275.312] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0275.313] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc31d8fc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf4258, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CHART.DLL", cAlternateFileName="")) returned 1 [0275.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0275.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0275.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.344] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.345] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.346] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.347] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.348] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.349] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.350] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.351] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0275.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0275.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0275.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0275.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0275.351] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0275.351] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0275.351] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0275.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0275.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0275.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0275.352] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0275.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0275.352] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0275.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0275.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0275.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.100] CloseHandle (hObject=0x1ec) returned 1 [0276.101] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.101] SetEndOfFile (hFile=0x1dc) returned 1 [0276.102] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll.vhd")) returned 1 [0276.103] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe206bc31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef8a36d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76658, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0276.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0276.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.106] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.107] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.108] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.109] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.110] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.111] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.112] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.113] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.114] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.115] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.116] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.117] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.118] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.119] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0276.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0276.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0276.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0276.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0276.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0276.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0276.119] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0276.119] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0276.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0276.120] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0276.120] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0276.120] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0276.120] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0276.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.120] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0276.121] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0276.121] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0276.121] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0276.121] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0276.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.125] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.126] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.126] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.127] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.127] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.131] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.131] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.131] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.132] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.132] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.132] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.133] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.133] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.133] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.134] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.134] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.134] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.135] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.135] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.135] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.136] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.137] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.137] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.137] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.138] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.138] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.138] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.139] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.139] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.139] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.140] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.140] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.140] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.141] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.141] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.141] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.142] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.142] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.142] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.143] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.143] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.143] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.144] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.144] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.144] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.145] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.145] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.145] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.146] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.147] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.147] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.148] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.148] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.148] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.149] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.149] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.149] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.150] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x658, lpOverlapped=0x0) returned 1 [0276.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x660, lpOverlapped=0x0) returned 1 [0276.150] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.150] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0276.150] CloseHandle (hObject=0x1ec) returned 1 [0276.151] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.151] SetEndOfFile (hFile=0x1dc) returned 1 [0276.152] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe.vhd")) returned 1 [0276.153] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1754c10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36e40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0276.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0276.154] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.154] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.156] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.157] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.158] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.159] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.160] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.161] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.162] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.163] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0276.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0276.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0276.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0276.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0276.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0276.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0276.170] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0276.170] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0276.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0276.171] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0276.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0276.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0276.171] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0276.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.171] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0276.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0276.173] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0276.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0276.173] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0276.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe40, lpOverlapped=0x0) returned 1 [0276.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe40, lpOverlapped=0x0) returned 1 [0276.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0276.187] CloseHandle (hObject=0x1ec) returned 1 [0276.188] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.188] SetEndOfFile (hFile=0x1dc) returned 1 [0276.188] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe.vhd")) returned 1 [0276.189] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c89, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CommunicatorContentBinApp.xap", cAlternateFileName="COMMUN~1.XAP")) returned 1 [0276.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0276.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.198] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.199] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.200] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.201] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.202] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.203] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.204] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0276.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0276.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0276.204] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0276.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0276.204] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17db8 [0276.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0276.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17db8 | out: hHeap=0x2830000) returned 1 [0276.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0276.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0276.205] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0276.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0276.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0276.205] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0276.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.205] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0276.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0276.206] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0276.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0276.206] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0276.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1c89, lpOverlapped=0x0) returned 1 [0276.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe377, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1c90, lpOverlapped=0x0) returned 1 [0276.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0276.248] CloseHandle (hObject=0x1ec) returned 1 [0276.248] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.248] SetEndOfFile (hFile=0x1dc) returned 1 [0276.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap.vhd")) returned 1 [0276.250] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0276.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0276.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.253] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.254] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.255] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.256] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.257] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.258] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.261] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.262] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.263] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.264] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.265] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.266] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.267] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0276.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0276.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0276.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0276.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0276.268] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e48 [0276.268] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0276.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e48 | out: hHeap=0x2830000) returned 1 [0276.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0276.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0276.269] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0276.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68a0 [0276.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0276.269] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0276.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.269] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0276.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68a0 | out: hHeap=0x2830000) returned 1 [0276.270] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0276.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0276.270] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0276.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14a8, lpOverlapped=0x0) returned 1 [0276.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14b0, lpOverlapped=0x0) returned 1 [0276.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0276.291] CloseHandle (hObject=0x1ec) returned 1 [0276.291] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.291] SetEndOfFile (hFile=0x1dc) returned 1 [0276.292] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\concrt140.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\concrt140.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\concrt140.dll.vhd")) returned 1 [0276.293] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0276.293] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17db8 [0276.293] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7c) returned 0xe19cb0 [0276.293] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0276.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONTAB32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\contab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0276.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.298] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.299] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0276.310] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0276.311] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0276.311] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.311] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0276.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0276.312] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0276.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0276.312] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0276.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.313] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.313] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.314] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.314] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.314] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.315] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.315] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.316] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xe58, lpOverlapped=0x0) returned 1 [0276.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff1a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xe60, lpOverlapped=0x0) returned 1 [0276.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0276.324] CloseHandle (hObject=0x1ec) returned 1 [0276.324] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.324] SetEndOfFile (hFile=0x1dc) returned 1 [0276.325] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONTAB32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\contab32.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONTAB32.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\contab32.dll.vhd")) returned 1 [0276.326] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0276.326] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e88 [0276.326] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x70) returned 0xdecce0 [0276.326] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1 [0276.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\cpprest140_2_6.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cpprest140_2_6.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0276.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0276.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.340] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.341] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.342] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.343] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0276.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0276.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0276.343] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0276.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0276.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0276.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0276.344] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0276.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0276.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0276.344] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0276.344] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0276.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0276.345] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0276.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0276.345] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0276.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0276.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0276.923] CloseHandle (hObject=0x1ec) returned 1 [0276.923] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.924] SetEndOfFile (hFile=0x1dc) returned 1 [0277.074] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\cpprest140_2_6.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cpprest140_2_6.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\cpprest140_2_6.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cpprest140_2_6.dll.vhd")) returned 1 [0277.075] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f8c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="csi.dll", cAlternateFileName="")) returned 1 [0277.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\csi.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\csi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0277.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0277.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.124] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.125] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.126] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.127] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.128] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.129] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.130] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.131] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.132] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0277.143] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0277.144] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0277.144] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74a0 [0277.144] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74a0 | out: hHeap=0x2830000) returned 1 [0277.144] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0277.144] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0277.144] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0277.144] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0277.144] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0277.144] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0277.144] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0277.144] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0277.144] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0277.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0277.145] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0277.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0277.145] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0277.146] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0277.146] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0277.146] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0277.146] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0277.146] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.146] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.162] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.162] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.163] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.165] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.165] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.165] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.311] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.312] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.312] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.312] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.316] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.317] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.317] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.317] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.319] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.320] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.320] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.321] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.321] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.322] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.522] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.529] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.530] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.530] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.530] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.531] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.531] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.533] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.533] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.533] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.534] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.534] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.534] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.535] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.535] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.535] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.536] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.538] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.538] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.538] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.539] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.539] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.539] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.540] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.540] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.541] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.541] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.541] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.542] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.542] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.542] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.543] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.543] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.543] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.545] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.545] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.545] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.546] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.617] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.617] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.617] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.623] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.623] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.623] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.624] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0277.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0277.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.018] CloseHandle (hObject=0x1ec) returned 1 [0278.019] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.019] SetEndOfFile (hFile=0x1dc) returned 1 [0278.019] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\csi.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\csi.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\csi.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\csi.dll.vhd")) returned 1 [0278.020] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e270, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSIRESOURCES.DLL", cAlternateFileName="CSIRES~1.DLL")) returned 1 [0278.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSIRESOURCES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\csiresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.068] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.069] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.070] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.071] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.072] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.073] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.074] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.075] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.076] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.077] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.078] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.079] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.080] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.081] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.085] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0278.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0278.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0278.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0278.086] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0278.086] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.086] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.087] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.087] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0278.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0278.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0278.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.230] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.231] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x270, lpOverlapped=0x0) returned 1 [0278.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd90, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x270, lpOverlapped=0x0) returned 1 [0278.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.241] CloseHandle (hObject=0x1ec) returned 1 [0278.242] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.242] SetEndOfFile (hFile=0x1dc) returned 1 [0278.251] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSIRESOURCES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\csiresources.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSIRESOURCES.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\csiresources.dll.vhd")) returned 1 [0278.295] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x904f8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1 [0278.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA0009.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data0009.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.300] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.301] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.302] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.303] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.304] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.305] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0278.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0278.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0278.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0278.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0278.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0278.316] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0278.316] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0278.316] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.317] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0278.317] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.317] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.317] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.317] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0278.318] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0278.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0278.318] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.363] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.363] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4f8, lpOverlapped=0x0) returned 1 [0278.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb08, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x500, lpOverlapped=0x0) returned 1 [0278.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.370] CloseHandle (hObject=0x1ec) returned 1 [0278.371] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.371] SetEndOfFile (hFile=0x1dc) returned 1 [0278.371] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA0009.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data0009.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA0009.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data0009.dll.vhd")) returned 1 [0278.372] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cd1a25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cd1a25, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbacf8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1 [0278.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000A.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data000a.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0278.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0278.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0278.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0278.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.407] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0278.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0278.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0278.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0278.408] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0278.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0278.409] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0278.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0278.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.431] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.432] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.432] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcf8, lpOverlapped=0x0) returned 1 [0278.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff308, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xd00, lpOverlapped=0x0) returned 1 [0278.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.452] CloseHandle (hObject=0x1ec) returned 1 [0278.453] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.453] SetEndOfFile (hFile=0x1dc) returned 1 [0278.456] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000A.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data000a.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000A.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data000a.dll.vhd")) returned 1 [0278.458] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a8396f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba890, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1 [0278.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000C.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data000c.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.461] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.462] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.463] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.464] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.465] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.466] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.467] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.468] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.469] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.470] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.471] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.472] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.473] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.474] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.475] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.476] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.476] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.476] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.476] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0278.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0278.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0278.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0278.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0278.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0278.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0278.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0278.477] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0278.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.477] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.477] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0278.478] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0278.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0278.478] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.496] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.496] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.496] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.497] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.497] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.504] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.513] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.513] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x890, lpOverlapped=0x0) returned 1 [0278.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff770, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x890, lpOverlapped=0x0) returned 1 [0278.521] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.521] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.522] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.522] CloseHandle (hObject=0x1ec) returned 1 [0278.522] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.522] SetEndOfFile (hFile=0x1dc) returned 1 [0278.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000C.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data000c.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000C.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\css7data000c.dll.vhd")) returned 1 [0278.524] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1 [0278.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.528] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.529] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.530] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.531] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.532] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.533] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.534] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.535] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.536] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.537] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.538] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.539] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.540] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.541] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.542] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0278.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0278.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0278.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0278.542] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0278.542] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.542] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0278.543] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.543] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.543] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0278.544] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0278.544] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0278.544] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.544] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x53f, lpOverlapped=0x0) returned 1 [0278.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffac1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x540, lpOverlapped=0x0) returned 1 [0278.544] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.544] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.544] CloseHandle (hObject=0x1ec) returned 1 [0278.544] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.545] SetEndOfFile (hFile=0x1dc) returned 1 [0278.545] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc.vhd")) returned 1 [0278.546] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x85cb0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0278.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DATAGATH.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\datagath.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.546] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.546] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.550] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.551] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.552] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.553] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.554] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.555] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.556] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.557] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.558] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.559] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.560] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.561] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.562] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.563] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.564] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.565] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.565] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0278.565] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0278.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0278.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0278.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0278.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0278.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0278.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0278.566] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0278.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.566] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.566] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0278.567] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0278.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0278.567] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.589] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1cb0, lpOverlapped=0x0) returned 1 [0278.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe350, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1cb0, lpOverlapped=0x0) returned 1 [0278.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.603] CloseHandle (hObject=0x1ec) returned 1 [0278.603] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.604] SetEndOfFile (hFile=0x1dc) returned 1 [0278.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DATAGATH.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\datagath.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DATAGATH.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\datagath.dll.vhd")) returned 1 [0278.605] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0b2f3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde2222ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0278.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBGHELP.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.606] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.611] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.612] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.613] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.614] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.615] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.616] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.624] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0278.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0278.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0278.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0278.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0278.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0278.625] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0278.625] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0278.626] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0278.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.626] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.626] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0278.627] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0278.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0278.627] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.646] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.646] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.646] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.654] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.654] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.655] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.655] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.656] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.656] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.656] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.666] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.666] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.666] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.667] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.668] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.670] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.671] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.698] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.698] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.698] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.699] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.700] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.701] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.701] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.701] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.702] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.703] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.703] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.703] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.704] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.705] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.706] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.707] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.708] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.708] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.708] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.709] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.709] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.709] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.710] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.711] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.712] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.722] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.722] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.722] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.723] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.723] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.724] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.724] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.724] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.725] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.725] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.725] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.726] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.726] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.726] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.727] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.727] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.727] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.728] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.728] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.729] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.729] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.729] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.730] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.730] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.730] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.731] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.731] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.731] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.740] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.742] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.742] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.742] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.743] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.745] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2b0, lpOverlapped=0x0) returned 1 [0278.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2b0, lpOverlapped=0x0) returned 1 [0278.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0278.747] CloseHandle (hObject=0x1ec) returned 1 [0278.747] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.747] SetEndOfFile (hFile=0x1dc) returned 1 [0278.749] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBGHELP.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dbghelp.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBGHELP.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dbghelp.dll.vhd")) returned 1 [0278.750] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x122a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0278.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dbwiz.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0278.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0278.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0278.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0278.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0278.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0278.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0278.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0278.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17f68 [0278.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0278.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17f68 | out: hHeap=0x2830000) returned 1 [0278.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0278.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0278.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0278.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0278.785] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0278.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0278.785] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0278.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0278.786] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0278.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0278.786] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0278.786] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.789] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.800] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.800] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.802] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.803] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.804] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.804] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.804] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.805] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.805] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.805] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.806] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.806] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.806] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.807] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.807] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.807] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.808] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.808] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.808] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.809] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.809] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.809] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.810] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.810] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.810] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.811] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.811] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.811] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.812] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.812] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.812] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.813] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.813] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.813] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.814] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.815] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.815] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.815] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0278.817] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.817] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0278.817] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.080] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.082] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.082] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.082] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.166] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.166] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.166] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.167] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.167] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.167] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.168] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.168] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.168] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.169] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.169] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.169] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.170] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.170] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa48, lpOverlapped=0x0) returned 1 [0279.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa50, lpOverlapped=0x0) returned 1 [0279.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0279.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0279.175] CloseHandle (hObject=0x1ec) returned 1 [0279.176] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.176] SetEndOfFile (hFile=0x1dc) returned 1 [0279.185] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBWIZ.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dbwiz.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBWIZ.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dbwiz.dll.vhd")) returned 1 [0279.186] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8b8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0279.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DLGSETP.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dlgsetp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0279.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0279.619] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.620] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.621] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.622] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.623] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.624] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.625] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.648] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ada8 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1af20 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0279.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17de8 [0279.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0279.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0279.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17de8 | out: hHeap=0x2830000) returned 1 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0279.649] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0279.649] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0279.649] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1af20 [0279.650] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b130 [0279.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1af20 | out: hHeap=0x2830000) returned 1 [0279.650] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b130 | out: hHeap=0x2830000) returned 1 [0279.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0279.651] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0279.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0279.651] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ada8 | out: hHeap=0x2830000) returned 1 [0279.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.743] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.744] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.744] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.745] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.746] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.746] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.747] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.748] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.748] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.756] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.756] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.756] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.759] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.760] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.760] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18b8, lpOverlapped=0x0) returned 1 [0279.762] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.762] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18c0, lpOverlapped=0x0) returned 1 [0279.763] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0279.763] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0279.763] CloseHandle (hObject=0x1ec) returned 1 [0279.763] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.763] SetEndOfFile (hFile=0x1dc) returned 1 [0279.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DLGSETP.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dlgsetp.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DLGSETP.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dlgsetp.dll.vhd")) returned 1 [0279.764] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1 [0279.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17f68 [0279.764] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x7e) returned 0xe1ada8 [0279.764] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0279.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DRILLDWN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\drilldwn.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0279.768] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.768] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0279.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0279.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0279.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0279.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0279.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0279.787] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0279.787] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0279.787] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0279.788] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0279.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0279.788] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0279.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0279.789] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0279.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0279.789] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0279.789] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0279.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.963] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0279.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.118] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.118] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.119] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.119] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.119] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.121] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.121] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.121] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.122] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.123] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.123] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.123] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.124] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.124] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.124] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.203] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.203] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.203] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.204] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.204] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.204] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.207] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.207] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1ec0, lpOverlapped=0x0) returned 1 [0280.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe140, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1ec0, lpOverlapped=0x0) returned 1 [0280.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0280.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0280.210] CloseHandle (hObject=0x1ec) returned 1 [0280.210] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.210] SetEndOfFile (hFile=0x1dc) returned 1 [0280.228] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DRILLDWN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\drilldwn.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DRILLDWN.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\drilldwn.dll.vhd")) returned 1 [0280.229] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3e7feda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x344a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0280.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGCNV.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dwgcnv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0280.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.230] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0280.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.259] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.260] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0280.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0280.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7600 [0280.260] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7600 | out: hHeap=0x2830000) returned 1 [0280.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0280.260] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0280.260] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0280.260] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0280.261] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0280.261] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0280.261] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0280.261] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0280.261] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0280.261] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0280.261] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0280.261] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0280.261] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0280.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0280.262] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0280.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0280.262] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0280.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x4a8, lpOverlapped=0x0) returned 1 [0280.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffb58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x4b0, lpOverlapped=0x0) returned 1 [0280.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0280.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0280.277] CloseHandle (hObject=0x1ec) returned 1 [0280.278] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.278] SetEndOfFile (hFile=0x1dc) returned 1 [0280.278] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGCNV.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dwgcnv.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGCNV.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dwgcnv.dll.vhd")) returned 1 [0280.279] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x899050, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0280.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGDP.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dwgdp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0280.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.289] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.290] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.291] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.292] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.293] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.294] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.295] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.296] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.297] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0280.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0280.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0280.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0280.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0280.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0280.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0280.313] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0280.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0280.314] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0280.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0280.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0280.314] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0280.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0280.314] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0280.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0280.315] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0280.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0280.315] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0280.315] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.316] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.318] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.318] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.318] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.319] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.319] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.320] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.321] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.322] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.322] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.323] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.323] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.323] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.324] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.326] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.326] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.327] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.327] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.328] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.330] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.330] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.330] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.331] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.331] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.331] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.332] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.332] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.332] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.432] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0280.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0280.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.216] CloseHandle (hObject=0x1ec) returned 1 [0281.216] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.216] SetEndOfFile (hFile=0x1dc) returned 1 [0281.222] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGDP.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dwgdp.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGDP.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\dwgdp.dll.vhd")) returned 1 [0281.224] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1beddbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1beddbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x374a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ELECTRICAL.VSL", cAlternateFileName="ELECTR~1.VSL")) returned 1 [0281.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.240] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.241] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.242] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.243] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.244] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0281.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0281.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0281.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0281.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0281.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0281.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0281.244] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0281.244] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0281.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0281.245] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0281.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0281.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0281.245] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0281.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.245] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0281.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0281.246] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0281.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0281.246] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0281.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x14a8, lpOverlapped=0x0) returned 1 [0281.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffeb58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x14b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x14b0, lpOverlapped=0x0) returned 1 [0281.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0281.262] CloseHandle (hObject=0x1ec) returned 1 [0281.263] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.263] SetEndOfFile (hFile=0x1dc) returned 1 [0281.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl.vhd")) returned 1 [0281.265] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25cc8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0281.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMABLT32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\emablt32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.268] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0281.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0281.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0281.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0281.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0281.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0281.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0281.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0281.286] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0281.286] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0281.287] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0281.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0281.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0281.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0281.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.287] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0281.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0281.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0281.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0281.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0281.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.292] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.292] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1cc8, lpOverlapped=0x0) returned 1 [0281.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1cd0, lpOverlapped=0x0) returned 1 [0281.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0281.300] CloseHandle (hObject=0x1ec) returned 1 [0281.300] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.300] SetEndOfFile (hFile=0x1dc) returned 1 [0281.300] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMABLT32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\emablt32.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMABLT32.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\emablt32.dll.vhd")) returned 1 [0281.301] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d10a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0281.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMSMDB32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\emsmdb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.310] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.311] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.312] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.313] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.314] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0281.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0281.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde74f8 [0281.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde74f8 | out: hHeap=0x2830000) returned 1 [0281.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0281.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dd8 [0281.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0281.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dd8 | out: hHeap=0x2830000) returned 1 [0281.322] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0281.322] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0281.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0281.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0281.323] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0281.323] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.323] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0281.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0281.324] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0281.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0281.324] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0281.324] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.324] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.333] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.333] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.333] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.341] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.341] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.348] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.363] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.364] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.364] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.379] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.380] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.380] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.380] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.389] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.390] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.390] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.391] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.426] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.426] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.428] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.428] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.429] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.429] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.429] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.430] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.430] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.430] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.431] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.433] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.433] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.433] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.434] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.434] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.434] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.435] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.435] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.435] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.436] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.436] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.436] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.437] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.437] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.445] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.446] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.824] CloseHandle (hObject=0x1ec) returned 1 [0281.824] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.824] SetEndOfFile (hFile=0x1dc) returned 1 [0281.846] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMSMDB32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\emsmdb32.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMSMDB32.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\emsmdb32.dll.vhd")) returned 1 [0281.847] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0281.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityDataHandler.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\entitydatahandler.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.851] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.852] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.853] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.854] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.855] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.856] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.857] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.858] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.859] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.860] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.861] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.862] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.863] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.864] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.865] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.866] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0281.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0281.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0281.866] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0281.866] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0281.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0281.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0281.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0281.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0281.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0281.867] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0281.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0281.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0281.867] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0281.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.867] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0281.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0281.868] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0281.868] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0281.869] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0281.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.872] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.872] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.872] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x860, lpOverlapped=0x0) returned 1 [0281.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff7a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x860, lpOverlapped=0x0) returned 1 [0281.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0281.877] CloseHandle (hObject=0x1ec) returned 1 [0281.877] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.877] SetEndOfFile (hFile=0x1dc) returned 1 [0281.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityDataHandler.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\entitydatahandler.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityDataHandler.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\entitydatahandler.dll.vhd")) returned 1 [0281.878] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0281.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityPicker.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\entitypicker.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.882] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.883] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.884] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.885] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.900] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0281.901] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0281.901] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.901] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0281.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0281.902] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0281.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0281.902] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0281.902] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.902] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.904] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.904] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.905] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.905] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.906] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.907] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xa60, lpOverlapped=0x0) returned 1 [0281.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff5a0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xa60, lpOverlapped=0x0) returned 1 [0281.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0281.934] CloseHandle (hObject=0x1ec) returned 1 [0281.934] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.934] SetEndOfFile (hFile=0x1dc) returned 1 [0281.934] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityPicker.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\entitypicker.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityPicker.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\entitypicker.dll.vhd")) returned 1 [0281.936] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ac68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0281.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ENVELOPE.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\envelope.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.937] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.940] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.941] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.942] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.943] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.944] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.945] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.946] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.947] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.948] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.949] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.950] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.951] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0281.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0281.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0281.958] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0281.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0281.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0281.958] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.958] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0281.958] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0281.958] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0281.959] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0281.959] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0281.959] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0281.959] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0281.959] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0281.959] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0281.959] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0281.960] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0281.960] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0281.960] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0281.960] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0281.960] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.960] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.962] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.962] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.963] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.972] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.972] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.972] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.974] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.974] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.974] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0281.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0281.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xc68, lpOverlapped=0x0) returned 1 [0281.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff398, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xc70, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xc70, lpOverlapped=0x0) returned 1 [0281.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0281.979] CloseHandle (hObject=0x1ec) returned 1 [0281.979] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.979] SetEndOfFile (hFile=0x1dc) returned 1 [0281.979] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ENVELOPE.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\envelope.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ENVELOPE.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\envelope.dll.vhd")) returned 1 [0281.980] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52eea7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20d8840, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0281.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0281.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0281.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.984] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.985] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.986] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.987] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.988] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.989] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.990] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.991] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.992] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.993] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.994] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.995] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.997] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0281.998] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.004] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.005] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.006] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.007] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0282.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0282.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0282.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7760 [0282.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7760 | out: hHeap=0x2830000) returned 1 [0282.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0282.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0282.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0282.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0282.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0282.007] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0282.007] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0282.008] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0282.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6c60 [0282.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0282.008] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0282.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0282.008] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0282.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6c60 | out: hHeap=0x2830000) returned 1 [0282.009] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0282.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0282.009] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0282.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.032] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.032] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.102] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.102] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.102] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.103] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.103] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.103] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.113] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.113] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.113] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.114] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.114] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.114] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.115] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.115] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.115] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.116] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.116] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.116] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.128] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.128] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.128] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.129] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.129] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.129] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.130] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.170] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.171] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.171] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.171] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.172] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.172] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.172] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.173] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.173] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.173] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.182] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.199] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.201] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.394] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.394] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.394] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.402] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.402] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0282.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0282.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.525] CloseHandle (hObject=0x1ec) returned 1 [0283.526] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.526] SetEndOfFile (hFile=0x1dc) returned 1 [0283.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe.vhd")) returned 1 [0283.528] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc54dd8eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x61f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0283.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0283.529] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0283.628] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.629] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.630] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.631] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.632] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.633] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.634] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0283.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0283.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7550 [0283.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7550 | out: hHeap=0x2830000) returned 1 [0283.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0283.645] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0283.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0283.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0283.645] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0283.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0283.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0283.646] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0283.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0283.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0283.646] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0283.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0283.646] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0283.647] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0283.647] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0283.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0283.648] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0283.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x61f, lpOverlapped=0x0) returned 1 [0283.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9e1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x620, lpOverlapped=0x0) returned 1 [0283.648] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0283.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0283.649] CloseHandle (hObject=0x1ec) returned 1 [0283.649] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.649] SetEndOfFile (hFile=0x1dc) returned 1 [0283.649] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excel.exe.manifest" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe.manifest"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excel.exe.manifest.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe.manifest.vhd")) returned 1 [0283.650] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXCEL.VisualElementsManifest.xml", cAlternateFileName="EXCELV~1.XML")) returned 1 [0283.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0283.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0283.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.655] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.656] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.657] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.658] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.659] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.660] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.661] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.662] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.663] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0283.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0283.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde78c0 [0283.669] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde78c0 | out: hHeap=0x2830000) returned 1 [0283.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0283.669] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0283.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0283.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0283.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0283.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0283.670] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0283.670] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b70 [0283.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0283.769] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0283.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0283.769] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0283.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b70 | out: hHeap=0x2830000) returned 1 [0283.770] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0283.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0283.770] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0283.770] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.770] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x152, lpOverlapped=0x0) returned 1 [0283.771] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffeae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.771] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x160, lpOverlapped=0x0) returned 1 [0283.776] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0283.776] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0283.777] CloseHandle (hObject=0x1ec) returned 1 [0283.778] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.778] SetEndOfFile (hFile=0x1dc) returned 1 [0283.778] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml.vhd")) returned 1 [0283.779] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0283.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0283.814] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.814] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0283.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7b28 [0283.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7b28 | out: hHeap=0x2830000) returned 1 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0283.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0283.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0283.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0283.831] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0283.831] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0283.831] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0283.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0283.832] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0283.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0283.832] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0283.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0283.833] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0283.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0283.833] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0283.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.836] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.905] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.906] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.906] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.907] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.907] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.908] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.908] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.908] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.909] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.910] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.930] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.982] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.982] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.982] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.007] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.059] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.059] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.059] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.078] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.078] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.079] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.079] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.079] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.080] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.080] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.081] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.081] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.081] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.083] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.083] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.083] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.084] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.084] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.099] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.100] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.100] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.100] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.101] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.101] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.101] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.104] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.105] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.106] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.107] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.108] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.109] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.109] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.109] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.110] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.110] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.110] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.111] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.111] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.111] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0284.112] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.112] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0284.112] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.125] CloseHandle (hObject=0x1ec) returned 1 [0290.125] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.126] SetEndOfFile (hFile=0x1dc) returned 1 [0290.128] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe.vhd")) returned 1 [0290.129] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24be028, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnv.exe.manifest", cAlternateFileName="EXCELC~1.MAN")) returned 1 [0290.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.manifest" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.130] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.130] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.133] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.134] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.135] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.136] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.137] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.138] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.139] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.140] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.141] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.142] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.143] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.144] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.145] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.146] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.147] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.148] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.149] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.149] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7810 [0290.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7810 | out: hHeap=0x2830000) returned 1 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0290.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0290.150] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0290.150] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0290.150] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.151] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0290.151] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0290.153] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0290.153] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.153] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x62c, lpOverlapped=0x0) returned 1 [0290.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff9d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.153] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x630, lpOverlapped=0x0) returned 1 [0290.153] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.154] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.154] CloseHandle (hObject=0x1ec) returned 1 [0290.154] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.154] SetEndOfFile (hFile=0x1dc) returned 1 [0290.155] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.manifest" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe.manifest"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.manifest.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe.manifest.vhd")) returned 1 [0290.157] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16440, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0290.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnvpxy.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnvpxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.158] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.158] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.164] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.165] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.166] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.167] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.168] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.169] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.170] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.171] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.172] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.173] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.174] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.175] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0290.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0290.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0290.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0290.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.183] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0290.183] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0290.184] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0290.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.184] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.184] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.185] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0290.185] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0290.185] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0290.185] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.190] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.190] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.190] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.191] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.191] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.191] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x440, lpOverlapped=0x0) returned 1 [0290.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffbc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x440, lpOverlapped=0x0) returned 1 [0290.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.195] CloseHandle (hObject=0x1ec) returned 1 [0290.195] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.195] SetEndOfFile (hFile=0x1dc) returned 1 [0290.195] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnvpxy.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnvpxy.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnvpxy.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnvpxy.dll.vhd")) returned 1 [0290.197] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67030, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0290.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXSEC32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\exsec32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.211] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.212] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.213] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.214] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.215] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.216] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.217] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.218] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.219] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.220] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.221] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.222] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.223] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.224] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.225] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.226] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.227] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.228] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.229] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.230] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.231] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.232] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.233] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0290.233] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0290.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0290.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.233] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.233] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0290.233] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.233] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0290.234] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0290.234] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0290.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.235] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.235] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0290.237] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0290.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0290.237] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.245] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.245] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.245] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.246] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.246] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.254] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.255] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.255] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.258] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.258] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.258] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1030, lpOverlapped=0x0) returned 1 [0290.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffefd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1030, lpOverlapped=0x0) returned 1 [0290.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.263] CloseHandle (hObject=0x1ec) returned 1 [0290.264] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.264] SetEndOfFile (hFile=0x1dc) returned 1 [0290.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXSEC32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\exsec32.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXSEC32.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\exsec32.dll.vhd")) returned 1 [0290.265] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1469b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ExtensibleApp.xap", cAlternateFileName="EXTENS~1.XAP")) returned 1 [0290.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.269] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.270] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.271] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.272] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.273] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.274] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.275] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.276] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.277] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.278] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.279] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.280] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.281] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.282] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.283] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.284] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.285] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.286] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.287] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.287] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7d38 [0290.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7d38 | out: hHeap=0x2830000) returned 1 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0290.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0290.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0290.288] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0290.288] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d50 [0290.288] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.289] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.289] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.289] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.290] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d50 | out: hHeap=0x2830000) returned 1 [0290.290] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0290.290] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0290.290] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.297] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.305] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.305] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x69b, lpOverlapped=0x0) returned 1 [0290.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff965, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x6a0, lpOverlapped=0x0) returned 1 [0290.307] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.308] CloseHandle (hObject=0x1ec) returned 1 [0290.308] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.308] SetEndOfFile (hFile=0x1dc) returned 1 [0290.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap.vhd")) returned 1 [0290.309] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16da48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0290.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FACILITY.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\facility.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.311] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.311] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.315] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.316] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.317] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.318] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.319] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.320] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.382] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0290.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0290.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0290.383] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0290.383] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.383] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.384] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0290.385] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0290.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0290.385] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.388] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.388] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.388] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.389] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.391] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.391] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.392] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.392] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.392] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.393] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.393] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.393] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.395] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.395] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.395] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.396] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.396] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.396] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.397] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.397] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.398] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.399] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.399] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.399] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.400] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.400] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.401] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.401] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.401] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.403] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.404] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.404] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.404] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.405] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.405] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.405] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.407] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.407] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.437] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.438] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.438] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.438] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.439] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.439] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.439] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.440] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.440] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.440] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.441] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.441] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.441] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.442] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.442] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.442] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.443] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.443] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.443] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.444] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.444] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.444] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.445] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.445] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.447] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.448] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.449] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.449] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.449] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.454] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.585] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.585] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.585] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.586] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.586] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.587] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.587] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.588] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a48, lpOverlapped=0x0) returned 1 [0290.588] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe5b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.588] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a50, lpOverlapped=0x0) returned 1 [0290.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.589] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.589] CloseHandle (hObject=0x1ec) returned 1 [0290.589] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.589] SetEndOfFile (hFile=0x1dc) returned 1 [0290.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FACILITY.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\facility.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FACILITY.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\facility.dll.vhd")) returned 1 [0290.655] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ccc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FilterModule.dll", cAlternateFileName="FILTER~1.DLL")) returned 1 [0290.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FilterModule.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\filtermodule.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.700] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.700] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.702] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.703] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.704] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.705] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.706] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.707] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.708] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.709] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.710] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.711] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.712] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.713] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.714] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.715] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.716] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.717] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.718] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.719] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.732] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.732] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.732] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.732] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0290.732] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0290.732] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0290.732] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.732] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.732] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0290.732] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.733] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0290.733] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0290.733] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.733] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0290.733] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.733] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.733] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.733] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0290.736] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0290.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0290.736] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.743] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.744] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.745] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.746] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.747] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.747] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.748] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.749] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.749] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.749] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.750] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.750] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.750] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.751] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.751] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.751] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.752] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.753] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.753] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.753] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.754] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.754] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.754] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.755] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.755] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.755] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.757] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.757] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.757] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.758] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xcc0, lpOverlapped=0x0) returned 1 [0290.758] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.758] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xcc0, lpOverlapped=0x0) returned 1 [0290.759] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.759] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.760] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.760] CloseHandle (hObject=0x1ec) returned 1 [0290.760] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.760] SetEndOfFile (hFile=0x1dc) returned 1 [0290.760] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FilterModule.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\filtermodule.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FilterModule.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\filtermodule.dll.vhd")) returned 1 [0290.761] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2687c83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc5640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FIRSTRUN.EXE", cAlternateFileName="")) returned 1 [0290.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.769] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.769] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.777] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.778] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.779] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.780] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.781] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.782] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.783] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.784] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.785] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.792] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.793] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.794] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0290.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0290.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19ed0 [0290.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19ed0 | out: hHeap=0x2830000) returned 1 [0290.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.794] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0290.794] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0290.795] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.795] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6fd0 [0290.795] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.795] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.795] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.795] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6fd0 | out: hHeap=0x2830000) returned 1 [0290.796] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0290.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0290.796] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.801] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.801] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.801] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.832] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.832] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.832] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.833] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.833] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.833] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.834] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.834] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.834] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.835] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.835] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.835] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.836] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.837] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.837] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.843] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.843] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.844] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.844] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.844] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.883] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.884] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.884] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.884] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.885] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.886] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.887] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.887] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.887] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.888] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.888] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.889] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.889] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.889] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.890] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.890] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.890] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.891] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.891] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.891] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.892] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.892] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.892] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.893] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.893] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.893] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.894] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.894] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.894] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.895] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.895] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.895] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.896] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.896] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.896] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.897] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.897] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.897] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.898] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.898] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.898] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.899] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.899] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.899] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.911] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.912] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.917] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0290.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0290.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1640, lpOverlapped=0x0) returned 1 [0290.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe9c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1640, lpOverlapped=0x0) returned 1 [0290.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0290.921] CloseHandle (hObject=0x1ec) returned 1 [0290.921] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.921] SetEndOfFile (hFile=0x1dc) returned 1 [0290.934] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe.vhd")) returned 1 [0290.951] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FIRSTRUN.VisualElementsManifest.xml", cAlternateFileName="FIRSTR~1.XML")) returned 1 [0290.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0290.952] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.952] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.954] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.955] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.956] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.957] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.958] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.959] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.960] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.961] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.962] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.963] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.964] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.965] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.966] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.967] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.968] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.969] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.970] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.971] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0290.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0290.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0290.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0290.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0290.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0290.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0290.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0290.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0290.971] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0290.971] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0290.971] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0290.972] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0290.972] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0290.972] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0290.972] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0290.972] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0290.973] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0290.973] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0290.973] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0290.973] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0290.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.973] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x158, lpOverlapped=0x0) returned 1 [0290.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0290.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x160, lpOverlapped=0x0) returned 1 [0290.973] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0290.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0290.973] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0291.045] CloseHandle (hObject=0x1ec) returned 1 [0291.045] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0291.045] SetEndOfFile (hFile=0x1dc) returned 1 [0291.045] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml.vhd")) returned 1 [0291.047] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0291.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e68 [0291.047] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6c) returned 0xdeca10 [0291.047] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0291.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GANTT.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gantt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0291.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0291.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.054] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.055] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.056] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.057] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.058] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.059] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.060] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.061] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.062] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.063] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.064] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.065] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.066] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.067] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.082] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.083] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.084] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.085] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.086] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.087] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.088] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0291.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0291.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde79c8 [0291.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde79c8 | out: hHeap=0x2830000) returned 1 [0291.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0291.088] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0291.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0291.088] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0291.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0291.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0291.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0291.089] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0291.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6940 [0291.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0291.089] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0291.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0291.089] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0291.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6940 | out: hHeap=0x2830000) returned 1 [0291.090] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0291.090] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0291.091] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0291.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0291.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.099] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.120] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.120] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.120] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.161] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.161] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.161] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.214] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.219] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.219] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.219] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.220] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.231] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.244] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.246] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.247] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.247] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.247] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.248] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.248] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.248] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.249] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.249] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.249] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.250] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.250] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.250] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.251] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.267] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.274] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.274] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.307] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.307] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.334] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.334] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.335] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.335] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.335] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.336] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.336] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.336] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.337] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.337] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.338] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.338] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.338] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.339] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.339] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.339] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.340] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.340] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.340] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.341] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.343] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.344] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.344] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.345] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.345] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.346] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.346] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.346] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.347] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.347] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.347] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.348] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.348] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1450, lpOverlapped=0x0) returned 1 [0291.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffebb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1450, lpOverlapped=0x0) returned 1 [0291.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0291.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0291.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0291.353] CloseHandle (hObject=0x1ec) returned 1 [0291.354] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0291.354] SetEndOfFile (hFile=0x1dc) returned 1 [0291.381] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GANTT.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gantt.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GANTT.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gantt.dll.vhd")) returned 1 [0291.384] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x701c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0291.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkexcel.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0291.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0291.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.396] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.397] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.398] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.399] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.400] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.401] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0291.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0291.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0291.407] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde77b8 [0291.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde77b8 | out: hHeap=0x2830000) returned 1 [0291.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0291.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0291.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0291.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0291.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0291.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0291.408] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0291.408] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0291.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0291.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0291.408] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0291.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0291.409] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0291.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0291.410] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0291.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0291.410] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0291.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0291.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.446] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.446] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.447] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.447] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.448] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.448] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.450] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.450] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.451] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.451] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.451] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.452] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.452] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.452] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.453] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.453] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.453] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.455] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.456] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.457] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.457] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.459] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.459] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.460] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.463] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.464] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.464] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.473] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.480] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.480] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.481] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.481] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.481] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.497] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.498] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.498] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.498] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.499] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.499] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.499] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.500] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.500] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.500] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.501] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.501] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.502] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.502] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.502] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.503] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.503] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.504] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.504] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.505] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.505] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.505] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.506] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.506] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.506] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.507] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.507] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.507] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.508] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.508] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.508] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.509] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.509] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.509] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.510] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.510] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.510] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.511] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.511] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.511] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.512] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.512] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.512] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.514] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.514] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.515] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.515] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.515] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.516] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.516] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.516] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.517] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.517] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.517] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.518] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.518] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.518] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.519] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.519] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.519] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.520] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.520] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.520] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.522] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.523] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.523] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.523] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.524] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.524] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.524] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.525] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.525] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.525] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.526] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.526] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.526] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.527] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.527] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.527] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.528] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.528] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.528] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.529] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.548] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.548] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.549] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.549] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.549] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.550] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.550] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.550] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.558] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.558] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.566] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.566] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.566] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.567] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.567] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.575] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.580] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.580] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.580] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.581] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.581] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.581] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.582] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.582] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.582] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.583] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.583] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.583] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.584] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.584] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.592] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.592] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.592] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.593] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.593] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.593] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.594] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.594] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.594] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.595] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.595] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.596] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.596] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.596] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.597] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.597] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.597] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.598] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.598] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.599] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.599] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.599] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.600] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.600] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.600] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.601] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.601] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.601] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.602] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.602] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.602] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.603] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.603] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.603] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.604] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.604] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.604] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.605] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.605] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.605] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.606] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.626] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.626] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.626] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.633] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.633] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0291.633] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0291.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0291.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.304] CloseHandle (hObject=0x1ec) returned 1 [0292.305] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0292.305] SetEndOfFile (hFile=0x1dc) returned 1 [0292.409] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKExcel.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkexcel.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKExcel.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkexcel.dll.vhd")) returned 1 [0292.411] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17ff3259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x485ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1 [0292.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKPowerPoint.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkpowerpoint.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0292.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0292.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.419] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.420] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.421] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.422] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.423] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.424] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.425] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.426] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.427] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.428] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.429] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.430] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.431] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.432] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.433] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.434] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.434] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0292.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0292.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0292.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0292.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0292.435] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0292.435] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0292.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0292.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0292.452] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0292.452] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0292.453] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0292.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0292.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0292.453] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0292.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0292.453] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0292.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0292.454] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0292.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0292.454] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0292.454] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0292.454] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.456] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.456] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.457] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.458] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.458] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.458] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.459] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.460] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.460] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.461] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.461] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.461] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.464] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.465] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.465] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.465] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.466] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.466] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.466] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.474] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.474] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.474] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.475] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.475] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.475] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.476] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.476] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.477] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.477] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.477] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.478] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.478] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.479] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.479] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.479] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.480] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.482] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.482] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.482] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.483] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.483] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.483] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.484] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.484] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.484] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.485] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.485] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.485] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.486] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.486] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.486] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.487] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.487] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.487] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.488] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.488] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.489] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.489] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.489] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.490] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.490] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.491] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.491] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.491] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.492] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.492] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.492] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.493] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.493] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.493] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.494] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.494] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.494] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.495] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.495] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.495] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.551] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.551] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.551] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.552] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.552] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.552] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.553] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.553] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.553] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.554] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.554] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.554] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.555] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.555] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.555] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.556] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.556] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.556] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.557] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.557] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.557] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.558] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.559] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.559] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.559] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.560] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.560] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.560] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.561] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.561] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.562] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.562] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.562] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.563] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.563] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.563] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.564] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.564] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.564] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.565] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.565] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.565] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.568] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.568] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.568] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.569] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.569] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.569] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.570] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.570] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.570] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.571] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.571] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.571] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.572] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.572] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.572] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.573] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.573] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.573] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.574] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.574] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.574] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.575] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.576] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.576] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.577] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.577] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.577] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.578] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.578] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.578] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.579] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.579] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.579] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.589] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.590] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.590] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.590] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.591] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.591] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.591] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.615] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.615] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.616] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.616] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.616] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.618] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.618] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.618] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.619] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.619] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.619] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.620] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.620] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.620] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.621] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.621] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.621] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.622] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.622] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.622] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.625] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.625] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.625] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.627] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.627] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.627] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.628] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.628] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.628] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.629] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.629] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.630] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.630] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.630] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.631] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.631] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.632] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.634] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.634] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.634] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.635] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.635] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.635] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.636] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.636] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.636] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.637] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.637] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.637] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.638] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.638] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.638] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.639] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.639] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.639] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.640] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.640] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.640] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.641] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.641] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.641] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.642] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.642] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.642] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.643] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.643] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.643] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.644] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.644] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.644] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.645] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.645] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.645] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.647] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.647] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.647] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.648] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.648] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.649] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.649] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.649] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.650] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.650] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.650] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.651] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.651] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.651] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.652] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.652] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.652] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.653] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.653] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.653] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.654] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.657] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.657] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.657] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.658] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.658] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.658] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.659] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.659] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.659] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.660] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.660] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.660] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.661] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.661] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.661] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.662] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.662] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.662] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.663] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.663] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.663] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.664] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.664] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.664] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.665] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.665] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.665] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.732] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.732] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.732] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.733] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.733] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.733] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.734] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.734] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.734] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.735] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.735] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.735] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.736] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.736] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.736] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.737] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.737] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.737] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.738] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.738] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.738] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.739] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.739] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.739] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.740] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.740] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.741] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.741] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.741] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.886] CloseHandle (hObject=0x1ec) returned 1 [0292.887] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0292.887] SetEndOfFile (hFile=0x1dc) returned 1 [0292.888] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKPowerPoint.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkpowerpoint.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKPowerPoint.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkpowerpoint.dll.vhd")) returned 1 [0292.918] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x528860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0292.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkword.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0292.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0292.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.921] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.922] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.923] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.924] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.925] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.926] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.927] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.928] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.929] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.930] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.931] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.932] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.933] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.934] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.935] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.936] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.937] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.938] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7658 [0292.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7658 | out: hHeap=0x2830000) returned 1 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0292.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0292.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0292.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0292.938] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0292.938] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6df0 [0292.938] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0292.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0292.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0292.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0292.939] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6df0 | out: hHeap=0x2830000) returned 1 [0292.939] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0292.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0292.940] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0292.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0292.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.950] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.957] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.957] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.958] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.958] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.958] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.961] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.961] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.961] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.962] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.964] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.964] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.964] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.965] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.965] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.965] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.966] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.966] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.966] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.967] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.967] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.967] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.968] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.968] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.968] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.969] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.969] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.969] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.970] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.971] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.971] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.971] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.975] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.975] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.975] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.976] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.976] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.976] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.977] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.977] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.977] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.978] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.978] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.978] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.979] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.979] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.979] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.980] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.980] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.980] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.981] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.981] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.981] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.983] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.983] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.983] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0292.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0292.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0292.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.008] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.008] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.031] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.031] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.031] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.032] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.033] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.033] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.033] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.034] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.034] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.034] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.035] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.041] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.041] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.053] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.053] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.053] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.054] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.054] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.054] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.055] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.055] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.055] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.056] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.056] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.057] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.057] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.058] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.058] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.058] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.060] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.060] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.060] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.061] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.061] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.061] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.062] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.062] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.063] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.063] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.063] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.064] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.064] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.064] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.065] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.065] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.065] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.066] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.066] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.084] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.085] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.085] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.086] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.086] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.554] CloseHandle (hObject=0x1ec) returned 1 [0293.554] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0293.554] SetEndOfFile (hFile=0x1dc) returned 1 [0293.667] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKWord.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkword.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKWord.dll.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gkword.dll.vhd")) returned 1 [0293.668] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x574260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0293.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0293.672] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.672] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0293.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.682] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.683] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.684] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.685] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.766] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.767] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.768] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.769] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.770] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.771] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.772] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.773] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.774] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.775] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.776] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0293.776] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0293.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0293.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde76b0 [0293.777] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde76b0 | out: hHeap=0x2830000) returned 1 [0293.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0293.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0293.777] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0293.777] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0293.777] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0293.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0293.777] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0293.777] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0293.777] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0293.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0293.778] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0293.778] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0293.778] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0293.779] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0293.779] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0293.779] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0293.780] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0293.780] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0293.780] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.816] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.816] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.816] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.823] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.823] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.837] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.838] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.838] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.838] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.839] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.840] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.840] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.840] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.841] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.841] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.841] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.842] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.842] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.842] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.843] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.845] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.845] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.845] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.846] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.846] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.846] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.847] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.848] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.848] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.848] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.849] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.849] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.849] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.850] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.850] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.850] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.851] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.852] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.852] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.852] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.853] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.853] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.853] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.854] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.854] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.854] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.855] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.855] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.855] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.856] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.856] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.856] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.857] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.861] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.861] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.861] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.862] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.862] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.862] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.863] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.865] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.865] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.865] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.866] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.866] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.866] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.867] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.867] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.867] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.868] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.868] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.868] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.869] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.869] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.869] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.870] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.870] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.870] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.871] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.871] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.871] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.873] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.873] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.873] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.874] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.874] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.874] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.875] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.875] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.875] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.876] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.876] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.876] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.877] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.877] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.877] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.878] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.878] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.878] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.879] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.879] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.879] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.984] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.984] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.984] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.985] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.985] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.985] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.986] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.987] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.988] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.992] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.993] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.993] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0293.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0293.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.000] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.015] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.015] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.015] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.023] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.023] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.023] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.070] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.070] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.070] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.071] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.071] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.071] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.072] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.072] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.072] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.073] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.085] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.086] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.087] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.087] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.088] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.088] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.088] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.089] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.089] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.089] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.090] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.090] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.090] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.091] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.091] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.091] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.092] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.092] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.092] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.093] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.093] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.093] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.094] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.094] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.095] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.095] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.095] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.096] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.096] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.097] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.097] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.097] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.098] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.098] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.098] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.174] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.175] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.175] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.175] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.176] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.176] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.176] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.177] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.177] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.177] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.178] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.178] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.178] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.179] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.179] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.179] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.180] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.180] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.180] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.181] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.181] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.181] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.182] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.182] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.183] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.183] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.183] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.184] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.184] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.184] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.185] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.185] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.185] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.186] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.186] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.186] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.187] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.187] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.187] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.188] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.188] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.188] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.189] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.189] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.189] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.192] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.192] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.192] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.193] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.193] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.193] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.194] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.194] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.194] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.195] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.195] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.195] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.196] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.196] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.196] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.197] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.197] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.197] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.198] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.198] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.198] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.199] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.199] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.200] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.200] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.200] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.201] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0294.201] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0294.202] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0294.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.152] CloseHandle (hObject=0x1ec) returned 1 [0295.152] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.152] SetEndOfFile (hFile=0x1dc) returned 1 [0295.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe.vhd")) returned 1 [0295.250] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2661a3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2661a3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2877b8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1 [0295.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0295.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.251] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0295.321] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.322] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.323] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.324] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.325] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.326] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.327] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.328] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.329] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.330] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.331] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.332] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.333] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.334] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.335] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.336] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.337] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.338] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.339] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.339] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c88 [0295.340] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c88 | out: hHeap=0x2830000) returned 1 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0295.340] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0295.340] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0295.340] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0295.340] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0295.340] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6850 [0295.340] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0295.341] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0295.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0295.341] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0295.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6850 | out: hHeap=0x2830000) returned 1 [0295.342] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0295.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0295.342] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0295.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.342] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x530, lpOverlapped=0x0) returned 1 [0295.342] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffad0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.342] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x530, lpOverlapped=0x0) returned 1 [0295.343] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0295.343] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0295.343] CloseHandle (hObject=0x1ec) returned 1 [0295.347] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.347] SetEndOfFile (hFile=0x1dc) returned 1 [0295.348] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Graph.exe.manifest" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe.manifest"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Graph.exe.manifest.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe.manifest.vhd")) returned 1 [0295.349] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0295.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0295.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0295.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.402] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.403] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.404] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.405] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.406] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.407] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.408] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.409] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.410] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.411] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.412] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.413] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.414] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.415] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.416] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.417] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.418] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.453] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.454] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.455] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.456] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.457] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.458] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.459] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.459] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0295.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0295.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7970 [0295.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7970 | out: hHeap=0x2830000) returned 1 [0295.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0295.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e38 [0295.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0295.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0295.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e38 | out: hHeap=0x2830000) returned 1 [0295.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0295.460] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0295.460] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0295.460] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6e40 [0295.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0295.461] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0295.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0295.461] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0295.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6e40 | out: hHeap=0x2830000) returned 1 [0295.462] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0295.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0295.462] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0295.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.462] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2fe, lpOverlapped=0x0) returned 1 [0295.462] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffd02, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.462] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x300, lpOverlapped=0x0) returned 1 [0295.463] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0295.463] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0295.463] CloseHandle (hObject=0x1ec) returned 1 [0295.463] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.464] SetEndOfFile (hFile=0x1dc) returned 1 [0295.739] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico.vhd")) returned 1 [0295.741] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0295.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x8) returned 0xe17e38 [0295.741] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x6e) returned 0xdecc68 [0295.741] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0295.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0295.883] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.883] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0295.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.886] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.887] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.888] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.889] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.890] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.891] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.892] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.893] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.894] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.895] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.896] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.897] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.898] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.899] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.900] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.901] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.902] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.903] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.904] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.905] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.906] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.907] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.908] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0295.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0295.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0295.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7ce0 [0295.908] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7ce0 | out: hHeap=0x2830000) returned 1 [0295.908] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0295.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0295.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0295.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0295.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0295.909] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a500 [0295.909] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a500 | out: hHeap=0x2830000) returned 1 [0295.910] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0295.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6b20 [0295.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0295.910] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0295.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0295.910] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0295.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6b20 | out: hHeap=0x2830000) returned 1 [0295.911] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1aa28 [0295.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1aa28 | out: hHeap=0x2830000) returned 1 [0295.911] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0295.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0295.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.913] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.913] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.913] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.986] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.986] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.987] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.988] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.989] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.989] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.989] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.990] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.990] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.990] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.991] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.991] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.991] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.992] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.992] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.993] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.994] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.994] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.994] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.995] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.995] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.995] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.996] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.996] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.996] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.997] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.997] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.997] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.998] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.998] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.998] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0295.999] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0295.999] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0295.999] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.000] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.000] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.001] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.001] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.001] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.002] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.002] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.002] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.003] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.003] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.003] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.004] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.004] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.004] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.005] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.005] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.005] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.006] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.006] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.006] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.007] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.008] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.009] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.009] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.009] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.010] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.010] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.010] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.011] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.011] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.011] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.012] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.012] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.012] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.013] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.013] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.013] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.014] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.014] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.014] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.016] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.016] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.016] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.017] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.017] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.017] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.018] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.018] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.018] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.019] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.019] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.019] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.020] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.020] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.020] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.021] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.021] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.021] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.022] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.022] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.022] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.024] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.024] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.024] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.025] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.025] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.025] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.026] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.026] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.026] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.027] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.027] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.027] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.028] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.028] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.028] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.029] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.029] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.029] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.030] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.030] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.030] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.289] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.289] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.290] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.290] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.290] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.291] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.292] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.293] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.293] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.293] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.294] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.294] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.294] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.295] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.295] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.295] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.296] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.296] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.296] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.297] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.297] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.308] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.308] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.308] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.309] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.309] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.309] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.310] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.310] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.310] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.349] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.349] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.349] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.350] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.350] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.351] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.351] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.351] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.352] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.352] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.352] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.353] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.353] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.354] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.354] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.354] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.355] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.355] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.355] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.356] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.356] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.356] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.357] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.357] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.357] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.358] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.358] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.358] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.359] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.359] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.359] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.360] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.360] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.360] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.361] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.361] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.361] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.362] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.362] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.362] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.364] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.365] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.365] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.365] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.366] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.366] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.366] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.367] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.367] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.367] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.368] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.368] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.369] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.369] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.370] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.370] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.370] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.371] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.371] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.371] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.372] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.372] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.372] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.373] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.373] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.373] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.374] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.374] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.374] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.375] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.375] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.375] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.376] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.376] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.377] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.377] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.377] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.378] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.378] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.378] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.379] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.381] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.381] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.381] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.382] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.382] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.382] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.383] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.383] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.383] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.384] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.384] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.384] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.385] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.385] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.385] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.386] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.386] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.386] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.387] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.387] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.387] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.408] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.409] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.411] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.411] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.411] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.419] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.419] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.419] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.420] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.420] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.420] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.421] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.421] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.421] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.422] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.422] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.422] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.423] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.423] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.423] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.424] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.424] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.424] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.425] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.425] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.425] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.426] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.427] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0296.427] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0296.427] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0296.428] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0297.619] CloseHandle (hObject=0x1ec) returned 1 [0297.619] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.619] SetEndOfFile (hFile=0x1dc) returned 1 [0297.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe.vhd")) returned 1 [0297.752] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.VisualElementsManifest.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0297.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0297.752] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0297.752] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0297.754] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.755] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.756] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.757] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.758] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.759] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.760] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.761] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.762] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.763] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.764] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.765] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.813] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.814] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.815] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.816] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.817] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.818] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0297.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0297.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7340 [0297.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7340 | out: hHeap=0x2830000) returned 1 [0297.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0297.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e48 [0297.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0297.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0297.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e48 | out: hHeap=0x2830000) returned 1 [0297.819] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a3f8 [0297.819] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a3f8 | out: hHeap=0x2830000) returned 1 [0297.820] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0297.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f30 [0297.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0297.820] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0297.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0297.820] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0297.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f30 | out: hHeap=0x2830000) returned 1 [0297.821] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0297.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0297.821] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0297.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.821] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x154, lpOverlapped=0x0) returned 1 [0297.821] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffeac, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0297.821] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x160, lpOverlapped=0x0) returned 1 [0297.822] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0297.822] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0297.823] CloseHandle (hObject=0x1ec) returned 1 [0297.823] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.823] SetEndOfFile (hFile=0x1dc) returned 1 [0297.823] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml.vhd")) returned 1 [0297.824] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0297.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVEEX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\grooveex.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0297.824] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="HeaderPatterns.xml", cAlternateFileName="HEADER~1.XML")) returned 1 [0297.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0297.826] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0297.826] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0297.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.837] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.838] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.839] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.840] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.841] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.842] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.843] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.844] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.845] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0297.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0297.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0297.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0297.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0297.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0297.845] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0297.845] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0297.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0297.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0297.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0297.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0297.846] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0297.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6f80 [0297.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0297.846] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0297.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0297.846] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0297.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6f80 | out: hHeap=0x2830000) returned 1 [0297.847] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a0e0 [0297.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a0e0 | out: hHeap=0x2830000) returned 1 [0297.847] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0297.847] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.847] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0297.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0297.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0297.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf2f, lpOverlapped=0x0) returned 1 [0297.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffff0d1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0297.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf30, lpOverlapped=0x0) returned 1 [0297.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0297.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0297.924] CloseHandle (hObject=0x1ec) returned 1 [0297.924] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0297.924] SetEndOfFile (hFile=0x1dc) returned 1 [0298.172] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml.vhd")) returned 1 [0298.173] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8da50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0298.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HVAC.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\hvac.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0298.174] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.174] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.176] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.177] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.178] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.179] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.180] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.181] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.182] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.183] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.184] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.185] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.186] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.187] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.188] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.189] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.190] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.191] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.192] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.193] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.194] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.195] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.196] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.197] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0298.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0298.197] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7c30 [0298.198] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7c30 | out: hHeap=0x2830000) returned 1 [0298.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a608 [0298.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17e48 [0298.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a608 | out: hHeap=0x2830000) returned 1 [0298.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17e48 | out: hHeap=0x2830000) returned 1 [0298.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0298.199] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0298.199] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0298.199] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0298.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0298.200] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0298.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.200] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0298.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0298.202] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0298.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0298.202] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0298.202] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.202] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.251] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.252] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.252] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.253] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.253] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.253] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.254] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.254] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.255] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.256] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.256] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.256] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.257] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.257] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.257] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.259] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.259] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.259] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.260] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.260] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.260] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.261] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.261] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.261] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.262] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.262] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.262] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.263] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.263] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.263] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.264] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.264] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.264] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.265] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.265] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.265] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.266] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.266] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.266] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.267] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.267] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.268] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.268] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.268] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.269] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.269] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.269] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.270] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.270] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.270] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.271] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.271] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.271] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.272] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.272] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.272] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.273] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.273] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.273] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.274] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.275] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.275] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.275] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.276] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.276] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.276] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.277] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.277] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.277] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.278] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.278] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.278] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.279] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.279] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.279] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.280] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.280] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.280] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.281] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.281] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.281] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.282] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.282] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.282] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.283] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.283] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.283] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.284] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.284] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.284] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.285] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.285] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.285] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.286] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.286] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.286] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.287] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.287] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.287] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.288] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x1a50, lpOverlapped=0x0) returned 1 [0298.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe5b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x1a50, lpOverlapped=0x0) returned 1 [0298.288] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.288] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.289] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0298.289] CloseHandle (hObject=0x1ec) returned 1 [0298.289] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.289] SetEndOfFile (hFile=0x1dc) returned 1 [0298.289] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HVAC.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\hvac.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HVAC.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\hvac.dll.vhd")) returned 1 [0298.290] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc316698e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc316698e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33c8ea0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x478a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0298.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEAWSDC.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ieawsdc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0298.291] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.291] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.376] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.377] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.378] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.379] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.380] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.381] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.382] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.383] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.384] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.385] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.386] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.387] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.388] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.389] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.390] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.391] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.392] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.393] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.394] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.395] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0298.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0298.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde7868 [0298.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde7868 | out: hHeap=0x2830000) returned 1 [0298.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ab30 [0298.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0298.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ab30 | out: hHeap=0x2830000) returned 1 [0298.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0298.395] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a818 [0298.395] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a818 | out: hHeap=0x2830000) returned 1 [0298.396] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0298.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6d00 [0298.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0298.396] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0298.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.396] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0298.397] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6d00 | out: hHeap=0x2830000) returned 1 [0298.397] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a1e8 [0298.398] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a1e8 | out: hHeap=0x2830000) returned 1 [0298.398] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0298.398] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.398] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.402] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.403] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.403] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.406] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.406] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.406] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.407] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.408] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.408] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.409] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.409] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.410] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.410] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.410] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.412] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.412] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.412] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.413] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.413] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.413] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.414] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.414] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.414] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.415] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.415] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.415] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.416] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.416] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.416] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.417] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.417] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.417] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.418] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.418] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.418] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.450] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.455] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.455] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.467] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.467] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.467] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.468] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.468] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.468] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.469] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.469] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.469] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.470] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.470] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.470] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.471] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.471] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.471] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.472] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.472] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x18a8, lpOverlapped=0x0) returned 1 [0298.472] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe758, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x18b0, lpOverlapped=0x0) returned 1 [0298.473] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.473] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0298.473] CloseHandle (hObject=0x1ec) returned 1 [0298.473] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.473] SetEndOfFile (hFile=0x1dc) returned 1 [0298.631] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEAWSDC.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ieawsdc.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEAWSDC.DLL.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ieawsdc.dll.vhd")) returned 1 [0298.632] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee295a70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0f0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1 [0298.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0298.632] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.632] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.635] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.636] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.637] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.638] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.639] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.640] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.641] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.642] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.643] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.644] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.645] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.646] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.647] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.648] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.649] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.650] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.651] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.652] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.653] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.654] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0298.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0298.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde75a8 [0298.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde75a8 | out: hHeap=0x2830000) returned 1 [0298.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1ac38 [0298.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0298.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ac38 | out: hHeap=0x2830000) returned 1 [0298.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0298.654] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a2f0 [0298.654] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a2f0 | out: hHeap=0x2830000) returned 1 [0298.654] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0298.655] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde6cb0 [0298.655] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0298.655] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0298.655] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.655] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0298.656] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde6cb0 | out: hHeap=0x2830000) returned 1 [0298.784] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a710 [0298.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a710 | out: hHeap=0x2830000) returned 1 [0298.784] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0298.784] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.784] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.785] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.785] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.786] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.787] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.787] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.787] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.788] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.788] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.789] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.790] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.790] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.790] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.791] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.791] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.791] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.792] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.792] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.792] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.793] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.793] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.793] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.794] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.794] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.794] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.795] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.795] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.795] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.796] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.796] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.796] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.797] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.797] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.797] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.798] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.798] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.798] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.799] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0xf0, lpOverlapped=0x0) returned 1 [0298.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffff10, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0xf0, lpOverlapped=0x0) returned 1 [0298.799] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.799] WriteFile (in: hFile=0x1ec, lpBuffer=0x79a42c*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesWritten=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.800] WriteFile (in: hFile=0x1ec, lpBuffer=0x79eec8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79eec8*, lpNumberOfBytesWritten=0x79a428*=0x100, lpOverlapped=0x0) returned 1 [0298.800] CloseHandle (hObject=0x1ec) returned 1 [0298.800] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.800] SetEndOfFile (hFile=0x1dc) returned 1 [0298.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe.vhd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe.vhd")) returned 1 [0298.801] FindNextFileW (in: hFindFile=0xd24098, lpFindFileData=0x79f068 | out: lpFindFileData=0x79f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5f4be42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5f4be42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd95d6d40, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xabb640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IGX.DLL", cAlternateFileName="")) returned 1 [0298.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IGX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\igx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0298.803] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.803] ReadFile (in: hFile=0x1ec, lpBuffer=0x79a42c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x79a428, lpOverlapped=0x0 | out: lpBuffer=0x79a42c*, lpNumberOfBytesRead=0x79a428*=0x8, lpOverlapped=0x0) returned 1 [0298.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.819] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.820] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.821] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.822] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.823] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.824] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.825] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.826] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.827] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.828] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.829] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.830] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.831] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.832] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.833] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.834] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.835] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.836] SystemFunction036 (in: RandomBuffer=0x799090, RandomBufferLength=0x4 | out: RandomBuffer=0x799090) returned 1 [0298.836] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x170) returned 0xe1ae30 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x160) returned 0xe1afa8 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x50) returned 0xde73f0 [0298.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde73f0 | out: hHeap=0x2830000) returned 1 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19dc8 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x2) returned 0xe17dc8 [0298.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19dc8 | out: hHeap=0x2830000) returned 1 [0298.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe17dc8 | out: hHeap=0x2830000) returned 1 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe19fd8 [0298.837] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe19fd8 | out: hHeap=0x2830000) returned 1 [0298.837] SystemFunction036 (in: RandomBuffer=0x7983c8, RandomBufferLength=0x4 | out: RandomBuffer=0x7983c8) returned 1 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x41) returned 0xde68f0 [0298.837] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x208) returned 0xe1afa8 [0298.838] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x104) returned 0xe1b1b8 [0298.838] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1afa8 | out: hHeap=0x2830000) returned 1 [0298.838] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1b1b8 | out: hHeap=0x2830000) returned 1 [0298.839] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xde68f0 | out: hHeap=0x2830000) returned 1 [0298.839] RtlAllocateHeap (HeapHandle=0x2830000, Flags=0x0, Size=0x100) returned 0xe1a920 [0298.839] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1a920 | out: hHeap=0x2830000) returned 1 [0298.839] HeapFree (in: hHeap=0x2830000, dwFlags=0x0, lpMem=0xe1ae30 | out: hHeap=0x2830000) returned 1 [0298.839] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0298.839] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.910] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.910] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.911] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.911] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.912] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.912] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.914] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.914] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.914] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.915] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.915] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.915] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.916] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.916] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.916] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.917] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.917] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.918] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.918] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.918] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.919] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.919] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.919] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.920] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.920] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.920] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.921] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.921] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.921] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.922] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.922] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.922] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.923] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.923] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.923] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.924] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.924] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.924] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.925] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.925] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.925] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.926] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.926] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.926] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.927] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.927] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.927] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.928] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.928] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.928] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.929] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.929] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.929] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.931] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.931] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.931] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.932] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.932] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.932] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.933] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.933] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.933] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.934] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.934] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.934] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.935] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.935] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.935] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.936] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.936] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.936] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.937] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.937] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.938] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.938] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.939] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.939] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.939] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.940] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.940] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.940] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.941] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.941] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.941] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.942] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.942] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.942] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.943] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.944] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.944] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.944] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.945] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.945] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.945] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.946] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.946] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.946] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.947] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.947] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.947] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.948] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.948] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.948] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.949] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.949] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0298.949] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0298.950] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0298.950] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.035] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.035] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.036] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.036] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.037] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.037] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.037] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.038] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.038] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.038] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.039] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.039] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.039] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.040] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.040] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.041] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.042] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.042] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.042] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.043] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.043] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.043] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.044] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.044] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.044] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.045] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.045] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.045] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.046] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.046] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.046] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.047] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.047] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.047] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.048] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.048] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.048] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.049] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.049] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.049] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.050] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.050] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.050] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.051] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.051] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.051] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.052] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.052] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.052] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.066] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.067] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.067] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.067] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.068] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.068] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.068] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.069] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.069] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.069] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.073] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.073] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.074] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.074] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.074] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.075] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.075] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.075] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.076] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.076] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.076] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.077] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.077] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.077] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.078] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.205] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.205] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.205] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.206] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.206] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.206] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.207] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.208] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.208] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.208] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.209] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.209] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.209] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.210] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.210] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.210] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.211] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.211] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.211] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.212] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.212] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.212] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.213] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.213] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.213] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.215] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.215] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.215] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.216] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.216] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.216] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.217] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.217] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.217] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.218] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.218] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.218] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.220] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.220] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.221] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.221] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.221] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.222] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.222] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.222] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.223] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.223] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.223] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.224] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.224] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.224] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.225] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.225] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.225] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.226] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.226] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.226] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.227] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.227] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.227] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.228] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.228] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.228] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.229] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.229] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.229] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.230] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.231] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.232] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.232] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.233] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.233] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.233] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.234] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.234] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.234] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.235] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.235] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.235] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.236] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.236] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.236] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.237] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.237] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.237] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.238] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.238] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.238] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.239] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.239] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.239] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.240] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.240] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.240] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.241] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.241] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.241] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.242] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.242] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.243] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.243] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.244] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.244] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.298] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.298] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.298] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.299] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.299] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.299] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.300] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.300] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.300] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.301] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.301] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.301] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.302] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.302] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.302] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.303] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.303] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.303] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.304] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.304] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.304] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.305] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0299.306] SetFilePointerEx (in: hFile=0x1ec, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0299.306] WriteFile (in: hFile=0x1ec, lpBuffer=0x79ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x79a474, lpOverlapped=0x0 | out: lpBuffer=0x79ccc0*, lpNumberOfBytesWritten=0x79a474*=0x2000, lpOverlapped=0x0) returned 1 [0299.306] ReadFile (in: hFile=0x1ec, lpBuffer=0x79acc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x79a470, lpOverlapped=0x0 | out: lpBuffer=0x79acc0*, lpNumberOfBytesRead=0x79a470*=0x2000, lpOverlapped=0x0) returned 1 [0304.032] CloseHandle (hObject=0x1ec) returned 1 [0304.040] SetFilePointerEx (in: hFile=0x1dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0304.040] SetEndOfFile (hFile=0x1dc) Thread: id = 2 os_tid = 0x1154 Thread: id = 3 os_tid = 0x1194 Thread: id = 4 os_tid = 0x118c Thread: id = 145 os_tid = 0xa20 Thread: id = 146 os_tid = 0xd14 Process: id = "2" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xc6c6000" os_pid = "0x1010" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Active Directory Toplogy\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0x1024 [0103.618] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.618] __set_app_type (_Type=0x1) [0103.618] __p__fmode () returned 0x776f3c14 [0103.618] __p__commode () returned 0x776f49ec [0103.619] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.619] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.619] SetThreadUILanguage (LangId=0x0) returned 0x26b0409 [0104.270] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.270] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.270] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.270] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.270] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.271] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.271] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.271] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.271] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.271] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.271] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.271] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.271] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x28504e8 [0104.275] OpenServiceW (hSCManager=0x28504e8, lpServiceName="Microsoft Exchange Active Directory Toplogy", dwDesiredAccess=0x20) returned 0x0 [0104.275] GetLastError () returned 0x424 [0104.275] _ultow (in: _Dest=0x424, _Radix=39319968 | out: _Dest=0x424) returned="1060" [0104.275] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.276] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x257f97c, nSize=0x2, Arguments=0x257f994 | out: lpBuffer="拘ʅ寮ɗ蕗\x19\x01") returned 0x62 [0104.276] GetFileType (hFile=0x90) returned 0x2 [0104.276] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x257f960 | out: lpMode=0x257f960) returned 1 [0104.685] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x28562d8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x257f970, lpReserved=0x0 | out: lpBuffer=0x28562d8*, lpNumberOfCharsWritten=0x257f970*=0x62) returned 1 [0104.780] LocalFree (hMem=0x28562d8) returned 0x0 [0104.780] LocalFree (hMem=0x0) returned 0x0 [0104.780] CloseServiceHandle (hSCObject=0x28504e8) returned 1 [0104.780] LocalFree (hMem=0x0) returned 0x0 [0104.780] exit (_Code=1060) Thread: id = 131 os_tid = 0x1294 Process: id = "3" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xc6cf000" os_pid = "0x102c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Anti-spam Update\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 6 os_tid = 0x100c [0103.739] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.739] __set_app_type (_Type=0x1) [0103.739] __p__fmode () returned 0x776f3c14 [0103.739] __p__commode () returned 0x776f49ec [0103.739] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.740] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.740] SetThreadUILanguage (LangId=0x0) returned 0x2520409 [0104.307] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.307] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.307] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.307] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.307] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.307] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.308] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.308] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.308] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.308] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.308] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.308] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.308] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x27704e8 [0104.471] OpenServiceW (hSCManager=0x27704e8, lpServiceName="Microsoft Exchange Anti-spam Update", dwDesiredAccess=0x20) returned 0x0 [0104.471] GetLastError () returned 0x424 [0104.472] _ultow (in: _Dest=0x424, _Radix=40368124 | out: _Dest=0x424) returned="1060" [0104.472] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.473] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x267f7d8, nSize=0x2, Arguments=0x267f7f0 | out: lpBuffer="拀ɷɧ蕗\x19\x01") returned 0x62 [0104.473] GetFileType (hFile=0x90) returned 0x2 [0104.473] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x267f7bc | out: lpMode=0x267f7bc) returned 1 [0104.686] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x27762c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x267f7cc, lpReserved=0x0 | out: lpBuffer=0x27762c0*, lpNumberOfCharsWritten=0x267f7cc*=0x62) returned 1 [0104.787] LocalFree (hMem=0x27762c0) returned 0x0 [0104.787] LocalFree (hMem=0x0) returned 0x0 [0104.787] CloseServiceHandle (hSCObject=0x27704e8) returned 1 [0104.787] LocalFree (hMem=0x0) returned 0x0 [0104.787] exit (_Code=1060) Thread: id = 136 os_tid = 0x111c Process: id = "4" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xedd0000" os_pid = "0x1034" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Compliance Audit\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0x1038 [0103.476] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.476] __set_app_type (_Type=0x1) [0103.476] __p__fmode () returned 0x776f3c14 [0103.476] __p__commode () returned 0x776f49ec [0103.476] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.476] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.477] SetThreadUILanguage (LangId=0x0) returned 0x2da0409 [0104.179] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.179] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.179] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.179] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.179] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.179] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.179] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.179] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.180] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.180] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.180] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.180] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.180] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2ff04e8 [0104.186] OpenServiceW (hSCManager=0x2ff04e8, lpServiceName="Microsoft Exchange Compliance Audit", dwDesiredAccess=0x20) returned 0x0 [0104.186] GetLastError () returned 0x424 [0104.186] _ultow (in: _Dest=0x424, _Radix=48495868 | out: _Dest=0x424) returned="1060" [0104.186] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.187] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x2e3fcd8, nSize=0x2, Arguments=0x2e3fcf0 | out: lpBuffer="拀˿ﴘˣ蕗\x19\x01") returned 0x62 [0104.188] GetFileType (hFile=0x90) returned 0x2 [0104.188] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2e3fcbc | out: lpMode=0x2e3fcbc) returned 1 [0104.634] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2ff62c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x2e3fccc, lpReserved=0x0 | out: lpBuffer=0x2ff62c0*, lpNumberOfCharsWritten=0x2e3fccc*=0x62) returned 1 [0104.772] LocalFree (hMem=0x2ff62c0) returned 0x0 [0104.772] LocalFree (hMem=0x0) returned 0x0 [0104.772] CloseServiceHandle (hSCObject=0x2ff04e8) returned 1 [0104.773] LocalFree (hMem=0x0) returned 0x0 [0104.773] exit (_Code=1060) Thread: id = 125 os_tid = 0x13e8 Process: id = "5" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x10451000" os_pid = "0x103c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Compliance Service\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0x1044 [0099.872] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0099.872] __set_app_type (_Type=0x1) [0099.872] __p__fmode () returned 0x776f3c14 [0099.872] __p__commode () returned 0x776f49ec [0099.872] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0099.873] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0099.873] SetThreadUILanguage (LangId=0x0) returned 0x2950409 [0102.243] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0102.243] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0102.243] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0102.243] _wcsicmp (_String1="stop", _String2="query") returned 2 [0102.243] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0102.243] _wcsicmp (_String1="stop", _String2="start") returned 14 [0102.243] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0102.243] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0102.243] _wcsicmp (_String1="stop", _String2="control") returned 16 [0102.243] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0102.243] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0102.243] ResolveDelayLoadedAPI () returned 0x7770c440 [0102.244] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2c104e8 [0102.254] OpenServiceW (hSCManager=0x2c104e8, lpServiceName="Microsoft Exchange Compliance Service", dwDesiredAccess=0x20) returned 0x0 [0102.255] GetLastError () returned 0x424 [0102.255] _ultow (in: _Dest=0x424, _Radix=44760364 | out: _Dest=0x424) returned="1060" [0102.255] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0102.256] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x2aafd08, nSize=0x2, Arguments=0x2aafd20 | out: lpBuffer="拈ˁ﵈ʪ蕗\x19\x01") returned 0x62 [0102.536] GetFileType (hFile=0x90) returned 0x2 [0102.536] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2aafcec | out: lpMode=0x2aafcec) returned 1 [0103.098] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2c162c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x2aafcfc, lpReserved=0x0 | out: lpBuffer=0x2c162c8*, lpNumberOfCharsWritten=0x2aafcfc*=0x62) returned 1 [0103.936] LocalFree (hMem=0x2c162c8) returned 0x0 [0103.936] LocalFree (hMem=0x0) returned 0x0 [0103.936] CloseServiceHandle (hSCObject=0x2c104e8) returned 1 [0103.936] LocalFree (hMem=0x0) returned 0x0 [0103.936] exit (_Code=1060) Thread: id = 111 os_tid = 0x1358 Process: id = "6" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x182d2000" os_pid = "0x11a0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange DAG Management\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9 os_tid = 0x119c [0103.640] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.640] __set_app_type (_Type=0x1) [0103.640] __p__fmode () returned 0x776f3c14 [0103.640] __p__commode () returned 0x776f49ec [0103.640] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.640] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.641] SetThreadUILanguage (LangId=0x0) returned 0x3120409 [0104.277] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.277] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.277] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.278] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.278] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.278] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.278] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.278] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.278] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.278] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.278] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.278] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.278] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x33e04e8 [0104.283] OpenServiceW (hSCManager=0x33e04e8, lpServiceName="Microsoft Exchange DAG Management", dwDesiredAccess=0x20) returned 0x0 [0104.284] GetLastError () returned 0x424 [0104.284] _ultow (in: _Dest=0x424, _Radix=52950588 | out: _Dest=0x424) returned="1060" [0104.284] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.285] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x327f618, nSize=0x2, Arguments=0x327f630 | out: lpBuffer="拀̾̧蕗\x19\x01") returned 0x62 [0104.285] GetFileType (hFile=0x90) returned 0x2 [0104.285] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x327f5fc | out: lpMode=0x327f5fc) returned 1 [0104.685] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x33e62c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x327f60c, lpReserved=0x0 | out: lpBuffer=0x33e62c0*, lpNumberOfCharsWritten=0x327f60c*=0x62) returned 1 [0104.781] LocalFree (hMem=0x33e62c0) returned 0x0 [0104.781] LocalFree (hMem=0x0) returned 0x0 [0104.781] CloseServiceHandle (hSCObject=0x33e04e8) returned 1 [0104.781] LocalFree (hMem=0x0) returned 0x0 [0104.781] exit (_Code=1060) Thread: id = 132 os_tid = 0x1298 Process: id = "7" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x3877c000" os_pid = "0x11a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x102c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 10 os_tid = 0x348 Thread: id = 30 os_tid = 0x484 Thread: id = 57 os_tid = 0xdf8 Thread: id = 88 os_tid = 0x104c Thread: id = 94 os_tid = 0xfb0 Process: id = "8" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x165d3000" os_pid = "0x1188" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Diagnostics\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 11 os_tid = 0x11a4 [0103.663] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.663] __set_app_type (_Type=0x1) [0103.663] __p__fmode () returned 0x776f3c14 [0103.663] __p__commode () returned 0x776f49ec [0103.663] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.663] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.663] SetThreadUILanguage (LangId=0x0) returned 0x26d0409 [0104.286] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.286] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.286] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.286] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.286] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.286] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.286] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.286] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.286] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.286] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.286] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.286] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.287] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x29504e8 [0104.290] OpenServiceW (hSCManager=0x29504e8, lpServiceName="Microsoft Exchange Diagnostics", dwDesiredAccess=0x20) returned 0x0 [0104.291] GetLastError () returned 0x424 [0104.291] _ultow (in: _Dest=0x424, _Radix=42203852 | out: _Dest=0x424) returned="1060" [0104.291] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.291] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x283faa8, nSize=0x2, Arguments=0x283fac0 | out: lpBuffer="抨ʕ﫨ʃ蕗\x19\x01") returned 0x62 [0104.292] GetFileType (hFile=0x90) returned 0x2 [0104.292] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x283fa8c | out: lpMode=0x283fa8c) returned 1 [0104.685] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x29562a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x283fa9c, lpReserved=0x0 | out: lpBuffer=0x29562a8*, lpNumberOfCharsWritten=0x283fa9c*=0x62) returned 1 [0104.782] LocalFree (hMem=0x29562a8) returned 0x0 [0104.782] LocalFree (hMem=0x0) returned 0x0 [0104.782] CloseServiceHandle (hSCObject=0x29504e8) returned 1 [0104.783] LocalFree (hMem=0x0) returned 0x0 [0104.783] exit (_Code=1060) Thread: id = 133 os_tid = 0x1110 Process: id = "9" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x79ad4000" os_pid = "0x1198" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange EdgeSync\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 12 os_tid = 0x1190 [0103.694] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.694] __set_app_type (_Type=0x1) [0103.694] __p__fmode () returned 0x776f3c14 [0103.694] __p__commode () returned 0x776f49ec [0103.694] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.694] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.695] SetThreadUILanguage (LangId=0x0) returned 0x2ab0409 [0104.293] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.293] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.293] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.293] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.293] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.293] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.293] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.293] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.293] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.293] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.293] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.293] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.294] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2dd04e8 [0104.298] OpenServiceW (hSCManager=0x2dd04e8, lpServiceName="Microsoft Exchange EdgeSync", dwDesiredAccess=0x20) returned 0x0 [0104.298] GetLastError () returned 0x424 [0104.298] _ultow (in: _Dest=0x424, _Radix=43448692 | out: _Dest=0x424) returned="1060" [0104.298] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.299] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x296f950, nSize=0x2, Arguments=0x296f968 | out: lpBuffer="抨˝戀ʖ蕗\x19\x01") returned 0x62 [0104.300] GetFileType (hFile=0x90) returned 0x2 [0104.300] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x296f934 | out: lpMode=0x296f934) returned 1 [0104.685] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2dd62a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x296f944, lpReserved=0x0 | out: lpBuffer=0x2dd62a8*, lpNumberOfCharsWritten=0x296f944*=0x62) returned 1 [0104.783] LocalFree (hMem=0x2dd62a8) returned 0x0 [0104.783] LocalFree (hMem=0x0) returned 0x0 [0104.783] CloseServiceHandle (hSCObject=0x2dd04e8) returned 1 [0104.784] LocalFree (hMem=0x0) returned 0x0 [0104.784] exit (_Code=1060) Thread: id = 134 os_tid = 0x11ac Process: id = "10" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x3b55000" os_pid = "0x300" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Frontend Transport\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 13 os_tid = 0xecc [0099.842] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0099.842] __set_app_type (_Type=0x1) [0099.842] __p__fmode () returned 0x776f3c14 [0099.842] __p__commode () returned 0x776f49ec [0099.842] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0099.842] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0099.843] SetThreadUILanguage (LangId=0x0) returned 0x2a80409 [0102.228] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0102.228] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0102.228] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0102.228] _wcsicmp (_String1="stop", _String2="query") returned 2 [0102.228] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0102.228] _wcsicmp (_String1="stop", _String2="start") returned 14 [0102.229] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0102.229] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0102.229] _wcsicmp (_String1="stop", _String2="control") returned 16 [0102.229] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0102.229] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0102.229] ResolveDelayLoadedAPI () returned 0x7770c440 [0102.229] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2dd04e8 [0102.239] OpenServiceW (hSCManager=0x2dd04e8, lpServiceName="Microsoft Exchange Frontend Transport", dwDesiredAccess=0x20) returned 0x0 [0102.241] GetLastError () returned 0x424 [0102.241] _ultow (in: _Dest=0x424, _Radix=42989184 | out: _Dest=0x424) returned="1060" [0102.241] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0102.252] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x28ff65c, nSize=0x2, Arguments=0x28ff674 | out: lpBuffer="拈˝ʏ蕗\x19\x01") returned 0x62 [0102.269] GetFileType (hFile=0x90) returned 0x2 [0102.269] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x28ff640 | out: lpMode=0x28ff640) returned 1 [0102.667] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2dd62c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x28ff650, lpReserved=0x0 | out: lpBuffer=0x2dd62c8*, lpNumberOfCharsWritten=0x28ff650*=0x62) returned 1 [0103.825] LocalFree (hMem=0x2dd62c8) returned 0x0 [0103.825] LocalFree (hMem=0x0) returned 0x0 [0103.825] CloseServiceHandle (hSCObject=0x2dd04e8) returned 1 [0103.826] LocalFree (hMem=0x0) returned 0x0 [0103.826] exit (_Code=1060) Thread: id = 110 os_tid = 0x134c Process: id = "11" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x685d6000" os_pid = "0xed0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Health Manager\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 14 os_tid = 0x1114 [0103.780] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.780] __set_app_type (_Type=0x1) [0103.780] __p__fmode () returned 0x776f3c14 [0103.780] __p__commode () returned 0x776f49ec [0103.780] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.780] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.781] SetThreadUILanguage (LangId=0x0) returned 0x2fd0409 [0104.482] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.482] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.482] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.482] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.482] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.482] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.482] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.482] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.482] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.482] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.482] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.482] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.482] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x33504e8 [0104.486] OpenServiceW (hSCManager=0x33504e8, lpServiceName="Microsoft Exchange Health Manager", dwDesiredAccess=0x20) returned 0x0 [0104.486] GetLastError () returned 0x424 [0104.486] _ultow (in: _Dest=0x424, _Radix=48102496 | out: _Dest=0x424) returned="1060" [0104.487] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.487] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x2ddfc3c, nSize=0x2, Arguments=0x2ddfc54 | out: lpBuffer="拀̵ﱼ˝蕗\x19\x01") returned 0x62 [0104.488] GetFileType (hFile=0x90) returned 0x2 [0104.488] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2ddfc20 | out: lpMode=0x2ddfc20) returned 1 [0104.686] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x33562c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x2ddfc30, lpReserved=0x0 | out: lpBuffer=0x33562c0*, lpNumberOfCharsWritten=0x2ddfc30*=0x62) returned 1 [0104.789] LocalFree (hMem=0x33562c0) returned 0x0 [0104.789] LocalFree (hMem=0x0) returned 0x0 [0104.789] CloseServiceHandle (hSCObject=0x33504e8) returned 1 [0104.789] LocalFree (hMem=0x0) returned 0x0 [0104.789] exit (_Code=1060) Thread: id = 138 os_tid = 0x12d4 Process: id = "12" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x562d7000" os_pid = "0x11ec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Health Manager Recovery\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 15 os_tid = 0x4b4 [0103.715] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.717] __set_app_type (_Type=0x1) [0103.717] __p__fmode () returned 0x776f3c14 [0103.717] __p__commode () returned 0x776f49ec [0103.717] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.718] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.718] SetThreadUILanguage (LangId=0x0) returned 0x2530409 [0104.301] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.301] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.301] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.301] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.301] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.301] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.301] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.301] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.301] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.301] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.301] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.301] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.301] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x29004e8 [0104.305] OpenServiceW (hSCManager=0x29004e8, lpServiceName="Microsoft Exchange Health Manager Recovery", dwDesiredAccess=0x20) returned 0x0 [0104.305] GetLastError () returned 0x424 [0104.305] _ultow (in: _Dest=0x424, _Radix=36763600 | out: _Dest=0x424) returned="1060" [0104.305] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.306] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x230f7ac, nSize=0x2, Arguments=0x230f7c4 | out: lpBuffer="拘ʐȰ蕗\x19\x01") returned 0x62 [0104.306] GetFileType (hFile=0x90) returned 0x2 [0104.306] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x230f790 | out: lpMode=0x230f790) returned 1 [0104.686] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x29062d8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x230f7a0, lpReserved=0x0 | out: lpBuffer=0x29062d8*, lpNumberOfCharsWritten=0x230f7a0*=0x62) returned 1 [0104.786] LocalFree (hMem=0x29062d8) returned 0x0 [0104.786] LocalFree (hMem=0x0) returned 0x0 [0104.786] CloseServiceHandle (hSCObject=0x29004e8) returned 1 [0104.786] LocalFree (hMem=0x0) returned 0x0 [0104.786] exit (_Code=1060) Thread: id = 135 os_tid = 0x11f8 Process: id = "13" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x14a9b000" os_pid = "0x1224" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x1010" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 16 os_tid = 0x1230 Thread: id = 40 os_tid = 0xfa8 Thread: id = 55 os_tid = 0x910 Thread: id = 91 os_tid = 0xfb4 Thread: id = 98 os_tid = 0xf9c Process: id = "14" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xc0b3000" os_pid = "0x123c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x1034" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 17 os_tid = 0x125c Thread: id = 21 os_tid = 0x6d0 Thread: id = 56 os_tid = 0xafc Thread: id = 92 os_tid = 0x1328 Thread: id = 101 os_tid = 0x133c Process: id = "15" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x13718000" os_pid = "0x1238" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x103c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 18 os_tid = 0x1264 Thread: id = 22 os_tid = 0x101c Thread: id = 41 os_tid = 0xf80 Thread: id = 76 os_tid = 0x514 Thread: id = 84 os_tid = 0xf88 Process: id = "16" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x6c458000" os_pid = "0x1268" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange IMAP4\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 19 os_tid = 0x126c [0103.552] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.553] __set_app_type (_Type=0x1) [0103.553] __p__fmode () returned 0x776f3c14 [0103.553] __p__commode () returned 0x776f49ec [0103.553] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.553] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.553] SetThreadUILanguage (LangId=0x0) returned 0x2c90409 [0104.199] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.199] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.199] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.199] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.199] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.199] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.199] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.199] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.199] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.199] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.199] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.199] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.199] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2ed04e8 [0104.204] OpenServiceW (hSCManager=0x2ed04e8, lpServiceName="Microsoft Exchange IMAP4", dwDesiredAccess=0x20) returned 0x0 [0104.205] GetLastError () returned 0x424 [0104.205] _ultow (in: _Dest=0x424, _Radix=46135668 | out: _Dest=0x424) returned="1060" [0104.205] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.206] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x2bff950, nSize=0x2, Arguments=0x2bff968 | out: lpBuffer="抨˭戀ʿ蕗\x19\x01") returned 0x62 [0104.206] GetFileType (hFile=0x90) returned 0x2 [0104.206] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2bff934 | out: lpMode=0x2bff934) returned 1 [0104.634] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2ed62a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x2bff944, lpReserved=0x0 | out: lpBuffer=0x2ed62a8*, lpNumberOfCharsWritten=0x2bff944*=0x62) returned 1 [0104.776] LocalFree (hMem=0x2ed62a8) returned 0x0 [0104.776] LocalFree (hMem=0x0) returned 0x0 [0104.776] CloseServiceHandle (hSCObject=0x2ed04e8) returned 1 [0104.777] LocalFree (hMem=0x0) returned 0x0 [0104.777] exit (_Code=1060) Thread: id = 128 os_tid = 0x1318 Process: id = "17" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x17d59000" os_pid = "0x1270" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange IMAP4 Backend\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 20 os_tid = 0xe6c [0103.597] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.597] __set_app_type (_Type=0x1) [0103.597] __p__fmode () returned 0x776f3c14 [0103.597] __p__commode () returned 0x776f49ec [0103.597] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.597] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.598] SetThreadUILanguage (LangId=0x0) returned 0x25e0409 [0104.263] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.263] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.263] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.263] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.263] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.263] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.263] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.263] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.263] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.263] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.263] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.264] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.264] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x26504e8 [0104.268] OpenServiceW (hSCManager=0x26504e8, lpServiceName="Microsoft Exchange IMAP4 Backend", dwDesiredAccess=0x20) returned 0x0 [0104.268] GetLastError () returned 0x424 [0104.268] _ultow (in: _Dest=0x424, _Radix=36895320 | out: _Dest=0x424) returned="1060" [0104.268] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.269] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x232fa34, nSize=0x2, Arguments=0x232fa4c | out: lpBuffer="拀ɥ充Ȳ蕗\x19\x01") returned 0x62 [0104.269] GetFileType (hFile=0x90) returned 0x2 [0104.269] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x232fa18 | out: lpMode=0x232fa18) returned 1 [0104.684] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x26562c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x232fa28, lpReserved=0x0 | out: lpBuffer=0x26562c0*, lpNumberOfCharsWritten=0x232fa28*=0x62) returned 1 [0104.779] LocalFree (hMem=0x26562c0) returned 0x0 [0104.779] LocalFree (hMem=0x0) returned 0x0 [0104.779] CloseServiceHandle (hSCObject=0x26504e8) returned 1 [0104.779] LocalFree (hMem=0x0) returned 0x0 [0104.779] exit (_Code=1060) Thread: id = 130 os_tid = 0x1168 Process: id = "18" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x168f3000" os_pid = "0x1018" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x11a0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 23 os_tid = 0x760 Thread: id = 31 os_tid = 0xf0 Thread: id = 58 os_tid = 0xc90 Thread: id = 89 os_tid = 0x1074 Thread: id = 96 os_tid = 0xd84 Process: id = "19" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6290e000" os_pid = "0x53c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x1188" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 24 os_tid = 0xa50 Thread: id = 32 os_tid = 0x12f8 Thread: id = 66 os_tid = 0xed8 Thread: id = 99 os_tid = 0xf7c Thread: id = 113 os_tid = 0x136c Process: id = "20" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x16951000" os_pid = "0x900" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x1198" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0x1258 Thread: id = 33 os_tid = 0xbf8 Thread: id = 54 os_tid = 0x9d0 Thread: id = 90 os_tid = 0xd8c Thread: id = 97 os_tid = 0xfa4 Process: id = "21" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x16974000" os_pid = "0x1278" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x300" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x994 Thread: id = 34 os_tid = 0x4f0 Thread: id = 53 os_tid = 0x5c4 Thread: id = 85 os_tid = 0x7e4 Thread: id = 86 os_tid = 0xa88 Process: id = "22" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1696a000" os_pid = "0xda4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xed0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0xb9c Thread: id = 35 os_tid = 0xf70 Thread: id = 67 os_tid = 0xef4 Thread: id = 114 os_tid = 0x13b8 Thread: id = 122 os_tid = 0x13f0 Process: id = "23" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x16a50000" os_pid = "0x42c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x11ec" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 28 os_tid = 0x1248 Thread: id = 36 os_tid = 0xf6c Thread: id = 59 os_tid = 0xcd0 Thread: id = 95 os_tid = 0xfac Thread: id = 112 os_tid = 0x1370 Process: id = "24" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x14ada000" os_pid = "0xd94" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Information Store\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 29 os_tid = 0xf5c [0104.722] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0104.722] __set_app_type (_Type=0x1) [0104.722] __p__fmode () returned 0x776f3c14 [0104.722] __p__commode () returned 0x776f49ec [0104.722] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0104.723] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0104.723] SetThreadUILanguage (LangId=0x0) returned 0x2300409 [0104.798] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.798] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.798] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.798] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.798] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.798] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.798] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.798] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.798] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.798] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.798] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.799] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.799] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x24e04e8 [0104.803] OpenServiceW (hSCManager=0x24e04e8, lpServiceName="Microsoft Exchange Information Store", dwDesiredAccess=0x20) returned 0x0 [0104.803] GetLastError () returned 0x424 [0104.803] _ultow (in: _Dest=0x424, _Radix=981552 | out: _Dest=0x424) returned="1060" [0104.803] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.804] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xefa0c, nSize=0x2, Arguments=0xefa24 | out: lpBuffer="拈Ɏ社\x0e蕗\x19\x01") returned 0x62 [0104.805] GetFileType (hFile=0x90) returned 0x2 [0104.805] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xef9f0 | out: lpMode=0xef9f0) returned 1 [0104.875] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x24e62c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xefa00, lpReserved=0x0 | out: lpBuffer=0x24e62c8*, lpNumberOfCharsWritten=0xefa00*=0x62) returned 1 [0104.993] LocalFree (hMem=0x24e62c8) returned 0x0 [0104.993] LocalFree (hMem=0x0) returned 0x0 [0104.993] CloseServiceHandle (hSCObject=0x24e04e8) returned 1 [0104.993] LocalFree (hMem=0x0) returned 0x0 [0104.993] exit (_Code=1060) Thread: id = 144 os_tid = 0x1164 Process: id = "25" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x15c5b000" os_pid = "0xf08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Mailbox Assistants\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 39 os_tid = 0xea0 [0103.576] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.576] __set_app_type (_Type=0x1) [0103.576] __p__fmode () returned 0x776f3c14 [0103.576] __p__commode () returned 0x776f49ec [0103.576] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.576] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.576] SetThreadUILanguage (LangId=0x0) returned 0x3190409 [0104.207] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.208] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.208] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.208] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.208] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.208] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.208] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.208] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.208] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.208] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.208] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.208] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.208] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x33a04e8 [0104.213] OpenServiceW (hSCManager=0x33a04e8, lpServiceName="Microsoft Exchange Mailbox Assistants", dwDesiredAccess=0x20) returned 0x0 [0104.213] GetLastError () returned 0x424 [0104.213] _ultow (in: _Dest=0x424, _Radix=49740036 | out: _Dest=0x424) returned="1060" [0104.213] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.215] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x2f6f8e0, nSize=0x2, Arguments=0x2f6f8f8 | out: lpBuffer="拈̺鸞˶蕗\x19\x01") returned 0x62 [0104.216] GetFileType (hFile=0x90) returned 0x2 [0104.216] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2f6f8c4 | out: lpMode=0x2f6f8c4) returned 1 [0104.635] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x33a62c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x2f6f8d4, lpReserved=0x0 | out: lpBuffer=0x33a62c8*, lpNumberOfCharsWritten=0x2f6f8d4*=0x62) returned 1 [0104.778] LocalFree (hMem=0x33a62c8) returned 0x0 [0104.778] LocalFree (hMem=0x0) returned 0x0 [0104.778] CloseServiceHandle (hSCObject=0x33a04e8) returned 1 [0104.778] LocalFree (hMem=0x0) returned 0x0 [0104.778] exit (_Code=1060) Thread: id = 129 os_tid = 0x1338 Process: id = "26" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6c6a5000" os_pid = "0xf90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x1268" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 37 os_tid = 0xf74 Thread: id = 42 os_tid = 0x4fc Thread: id = 78 os_tid = 0xb0 Thread: id = 103 os_tid = 0x1118 Thread: id = 117 os_tid = 0x1354 Process: id = "27" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x65ad000" os_pid = "0xeac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "17" os_parent_pid = "0x1270" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 38 os_tid = 0x1048 Thread: id = 43 os_tid = 0x4e8 Thread: id = 74 os_tid = 0xfd0 Thread: id = 100 os_tid = 0x11f4 Thread: id = 115 os_tid = 0x13ac Process: id = "28" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xb079000" os_pid = "0x380" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0xd94" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 44 os_tid = 0x480 Thread: id = 51 os_tid = 0x2c0 Thread: id = 109 os_tid = 0x1094 Thread: id = 140 os_tid = 0x115c Thread: id = 142 os_tid = 0xcdc Process: id = "29" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xaa5c000" os_pid = "0x550" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Mailbox Replication\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 45 os_tid = 0x7f0 [0103.531] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.531] __set_app_type (_Type=0x1) [0103.531] __p__fmode () returned 0x776f3c14 [0103.531] __p__commode () returned 0x776f49ec [0103.531] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.531] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.532] SetThreadUILanguage (LangId=0x0) returned 0x2520409 [0104.189] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.189] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.189] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.189] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.189] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.190] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.190] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.190] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.190] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.190] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.190] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.190] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.190] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x26604e8 [0104.195] OpenServiceW (hSCManager=0x26604e8, lpServiceName="Microsoft Exchange Mailbox Replication", dwDesiredAccess=0x20) returned 0x0 [0104.196] GetLastError () returned 0x424 [0104.196] _ultow (in: _Dest=0x424, _Radix=40106232 | out: _Dest=0x424) returned="1060" [0104.196] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.197] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x263f8d4, nSize=0x2, Arguments=0x263f8ec | out: lpBuffer="拐ɦ樂ɣ蕗\x19\x01") returned 0x62 [0104.197] GetFileType (hFile=0x90) returned 0x2 [0104.197] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x263f8b8 | out: lpMode=0x263f8b8) returned 1 [0104.634] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x26662d0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x263f8c8, lpReserved=0x0 | out: lpBuffer=0x26662d0*, lpNumberOfCharsWritten=0x263f8c8*=0x62) returned 1 [0104.775] LocalFree (hMem=0x26662d0) returned 0x0 [0104.775] LocalFree (hMem=0x0) returned 0x0 [0104.775] CloseServiceHandle (hSCObject=0x26604e8) returned 1 [0104.775] LocalFree (hMem=0x0) returned 0x0 [0104.776] exit (_Code=1060) Thread: id = 127 os_tid = 0x1340 Process: id = "30" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xb1dd000" os_pid = "0xa24" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange Mailbox Transport Delivery\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 46 os_tid = 0xd10 [0103.511] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.511] __set_app_type (_Type=0x1) [0103.511] __p__fmode () returned 0x776f3c14 [0103.511] __p__commode () returned 0x776f49ec [0103.511] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.511] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.511] SetThreadUILanguage (LangId=0x0) returned 0x28c0409 [0104.551] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.551] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.551] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.551] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.551] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.551] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.551] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.551] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.551] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.551] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.552] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.552] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.552] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2b304e8 [0104.556] OpenServiceW (hSCManager=0x2b304e8, lpServiceName="Microsoft Exchange Mailbox Transport Delivery", dwDesiredAccess=0x20) returned 0x0 [0104.556] GetLastError () returned 0x424 [0104.556] _ultow (in: _Dest=0x424, _Radix=44562588 | out: _Dest=0x424) returned="1060" [0104.556] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.557] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x2a7f878, nSize=0x2, Arguments=0x2a7f890 | out: lpBuffer="拠ʳʧ蕗\x19\x01") returned 0x62 [0104.557] GetFileType (hFile=0x90) returned 0x2 [0104.557] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x2a7f85c | out: lpMode=0x2a7f85c) returned 1 [0104.735] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2b362e0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x2a7f86c, lpReserved=0x0 | out: lpBuffer=0x2b362e0*, lpNumberOfCharsWritten=0x2a7f86c*=0x62) returned 1 [0104.818] LocalFree (hMem=0x2b362e0) returned 0x0 [0104.818] LocalFree (hMem=0x0) returned 0x0 [0104.818] CloseServiceHandle (hSCObject=0x2b304e8) returned 1 [0104.818] LocalFree (hMem=0x0) returned 0x0 [0104.818] exit (_Code=1060) Thread: id = 126 os_tid = 0x1144 Process: id = "31" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x17bde000" os_pid = "0xd24" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange POP3\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 47 os_tid = 0xac0 [0104.175] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0104.175] __set_app_type (_Type=0x1) [0104.176] __p__fmode () returned 0x776f3c14 [0104.176] __p__commode () returned 0x776f49ec [0104.176] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0104.176] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0104.176] SetThreadUILanguage (LangId=0x0) returned 0x2850409 [0104.627] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.627] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.627] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.627] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.627] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.627] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.627] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.627] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.627] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.627] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.628] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.628] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.628] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2c104e8 [0104.632] OpenServiceW (hSCManager=0x2c104e8, lpServiceName="Microsoft Exchange POP3", dwDesiredAccess=0x20) returned 0x0 [0104.632] GetLastError () returned 0x424 [0104.632] _ultow (in: _Dest=0x424, _Radix=41679704 | out: _Dest=0x424) returned="1060" [0104.632] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.633] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x27bfb34, nSize=0x2, Arguments=0x27bfb4c | out: lpBuffer="抠ˁﭴɻ蕗\x19\x01") returned 0x62 [0104.633] GetFileType (hFile=0x90) returned 0x2 [0104.633] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x27bfb18 | out: lpMode=0x27bfb18) returned 1 [0104.772] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2c162a0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x27bfb28, lpReserved=0x0 | out: lpBuffer=0x2c162a0*, lpNumberOfCharsWritten=0x27bfb28*=0x62) returned 1 [0104.853] LocalFree (hMem=0x2c162a0) returned 0x0 [0104.853] LocalFree (hMem=0x0) returned 0x0 [0104.853] CloseServiceHandle (hSCObject=0x2c104e8) returned 1 [0104.854] LocalFree (hMem=0x0) returned 0x0 [0104.854] exit (_Code=1060) Thread: id = 143 os_tid = 0x1084 Process: id = "32" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xaf5f000" os_pid = "0xab4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"Microsoft Exchange POP3 Backend\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 48 os_tid = 0xd64 [0103.760] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.760] __set_app_type (_Type=0x1) [0103.760] __p__fmode () returned 0x776f3c14 [0103.760] __p__commode () returned 0x776f49ec [0103.760] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.760] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.760] SetThreadUILanguage (LangId=0x0) returned 0x3160409 [0104.474] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.474] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.474] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.474] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.474] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.474] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.474] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.474] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.474] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.475] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.475] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.475] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.475] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x33204e8 [0104.479] OpenServiceW (hSCManager=0x33204e8, lpServiceName="Microsoft Exchange POP3 Backend", dwDesiredAccess=0x20) returned 0x0 [0104.479] GetLastError () returned 0x424 [0104.479] _ultow (in: _Dest=0x424, _Radix=52690140 | out: _Dest=0x424) returned="1060" [0104.479] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.480] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x323fcb8, nSize=0x2, Arguments=0x323fcd0 | out: lpBuffer="抨̲ﳸ̣蕗\x19\x01") returned 0x62 [0104.480] GetFileType (hFile=0x90) returned 0x2 [0104.480] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x323fc9c | out: lpMode=0x323fc9c) returned 1 [0104.686] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x33262a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x323fcac, lpReserved=0x0 | out: lpBuffer=0x33262a8*, lpNumberOfCharsWritten=0x323fcac*=0x62) returned 1 [0104.788] LocalFree (hMem=0x33262a8) returned 0x0 [0104.788] LocalFree (hMem=0x0) returned 0x0 [0104.788] CloseServiceHandle (hSCObject=0x33204e8) returned 1 [0104.788] LocalFree (hMem=0x0) returned 0x0 [0104.788] exit (_Code=1060) Thread: id = 137 os_tid = 0xfdc Process: id = "33" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xb060000" os_pid = "0xcf8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"SQL Server Agent (TESTINSTANCE)\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0xd44 [0103.801] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.801] __set_app_type (_Type=0x1) [0103.801] __p__fmode () returned 0x776f3c14 [0103.801] __p__commode () returned 0x776f49ec [0103.801] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.802] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.802] SetThreadUILanguage (LangId=0x0) returned 0x2bc0409 [0104.489] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.489] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.489] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.489] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.489] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.489] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.489] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.489] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.489] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.489] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.489] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.489] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.489] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2c804e8 [0104.493] OpenServiceW (hSCManager=0x2c804e8, lpServiceName="SQL Server Agent (TESTINSTANCE)", dwDesiredAccess=0x20) returned 0x0 [0104.493] GetLastError () returned 0x424 [0104.493] _ultow (in: _Dest=0x424, _Radix=43906756 | out: _Dest=0x424) returned="1060" [0104.493] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.494] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x29df6a0, nSize=0x2, Arguments=0x29df6b8 | out: lpBuffer="抨ˈʝ蕗\x19\x01") returned 0x62 [0104.494] GetFileType (hFile=0x90) returned 0x2 [0104.494] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x29df684 | out: lpMode=0x29df684) returned 1 [0104.687] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x2c862a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x29df694, lpReserved=0x0 | out: lpBuffer=0x2c862a8*, lpNumberOfCharsWritten=0x29df694*=0x62) returned 1 [0104.790] LocalFree (hMem=0x2c862a8) returned 0x0 [0104.790] LocalFree (hMem=0x0) returned 0x0 [0104.790] CloseServiceHandle (hSCObject=0x2c804e8) returned 1 [0104.791] LocalFree (hMem=0x0) returned 0x0 [0104.791] exit (_Code=1060) Thread: id = 139 os_tid = 0x10b4 Process: id = "34" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xb461000" os_pid = "0xd88" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1134" cmd_line = "sc stop \"SQL Server (TESTINSTANCE)\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 50 os_tid = 0xaac [0103.966] GetModuleHandleA (lpModuleName=0x0) returned 0x190000 [0103.966] __set_app_type (_Type=0x1) [0103.966] __p__fmode () returned 0x776f3c14 [0103.966] __p__commode () returned 0x776f49ec [0103.967] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x195f00) returned 0x0 [0103.967] __wgetmainargs (in: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030, _DoWildCard=0, _StartInfo=0x19e03c | out: _Argc=0x19e028, _Argv=0x19e02c, _Env=0x19e030) returned 0 [0103.967] SetThreadUILanguage (LangId=0x0) returned 0x2490409 [0104.618] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0104.618] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0104.618] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0104.618] _wcsicmp (_String1="stop", _String2="query") returned 2 [0104.618] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0104.618] _wcsicmp (_String1="stop", _String2="start") returned 14 [0104.618] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0104.618] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0104.618] _wcsicmp (_String1="stop", _String2="control") returned 16 [0104.618] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0104.618] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0104.619] ResolveDelayLoadedAPI () returned 0x7770c440 [0104.619] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x27c04e8 [0104.623] OpenServiceW (hSCManager=0x27c04e8, lpServiceName="SQL Server (TESTINSTANCE)", dwDesiredAccess=0x20) returned 0x0 [0104.624] GetLastError () returned 0x424 [0104.624] _ultow (in: _Dest=0x424, _Radix=40564796 | out: _Dest=0x424) returned="1060" [0104.624] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x19e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0104.625] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x26af818, nSize=0x2, Arguments=0x26af830 | out: lpBuffer="抨ɼɪ蕗\x19\x01") returned 0x62 [0104.625] GetFileType (hFile=0x90) returned 0x2 [0104.625] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x26af7fc | out: lpMode=0x26af7fc) returned 1 [0104.768] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x27c62a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x26af80c, lpReserved=0x0 | out: lpBuffer=0x27c62a8*, lpNumberOfCharsWritten=0x26af80c*=0x62) returned 1 [0104.833] LocalFree (hMem=0x27c62a8) returned 0x0 [0104.833] LocalFree (hMem=0x0) returned 0x0 [0104.833] CloseServiceHandle (hSCObject=0x27c04e8) returned 1 [0104.834] LocalFree (hMem=0x0) returned 0x0 [0104.834] exit (_Code=1060) Thread: id = 141 os_tid = 0x524 Process: id = "35" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x16eac000" os_pid = "0xc2c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "25" os_parent_pid = "0xf08" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 52 os_tid = 0xdbc Thread: id = 68 os_tid = 0xf4c Thread: id = 77 os_tid = 0x97c Thread: id = 102 os_tid = 0x864 Thread: id = 116 os_tid = 0x1388 Process: id = "36" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xb813000" os_pid = "0xa90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "29" os_parent_pid = "0x550" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 60 os_tid = 0xa6c Thread: id = 69 os_tid = 0xdb0 Thread: id = 79 os_tid = 0xc48 Thread: id = 104 os_tid = 0x129c Thread: id = 118 os_tid = 0x1390 Process: id = "37" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x187ef000" os_pid = "0x25c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "30" os_parent_pid = "0xa24" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 61 os_tid = 0xe50 Thread: id = 70 os_tid = 0xf78 Thread: id = 80 os_tid = 0x6d8 Thread: id = 105 os_tid = 0x13b0 Thread: id = 119 os_tid = 0x13ec Process: id = "38" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xbaef000" os_pid = "0x388" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "31" os_parent_pid = "0xd24" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 62 os_tid = 0x5a8 Thread: id = 71 os_tid = 0xf84 Thread: id = 81 os_tid = 0xcb8 Thread: id = 106 os_tid = 0x13b4 Thread: id = 120 os_tid = 0x138c Process: id = "39" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xb9b1000" os_pid = "0x710" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "32" os_parent_pid = "0xab4" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 63 os_tid = 0x73c Thread: id = 72 os_tid = 0xf54 Thread: id = 82 os_tid = 0x440 Thread: id = 93 os_tid = 0x11e4 Thread: id = 107 os_tid = 0x13c4 Process: id = "40" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xba67000" os_pid = "0x84" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "33" os_parent_pid = "0xcf8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0xbdc Thread: id = 73 os_tid = 0xf0c Thread: id = 83 os_tid = 0x6e0 Thread: id = 108 os_tid = 0x1398 Thread: id = 121 os_tid = 0x13a4 Process: id = "41" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xba01000" os_pid = "0x428" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "34" os_parent_pid = "0xd88" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 65 os_tid = 0x168 Thread: id = 75 os_tid = 0x520 Thread: id = 87 os_tid = 0x1014 Thread: id = 123 os_tid = 0x1348 Thread: id = 124 os_tid = 0x13e4